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(57) Abstract 



A location system for commercial wireless telecommunication infrastructures (CMRRs). The system is an end-to-end solution having 
one or more location systems (42) for outputting requested locations of commercially available hand sets or mobile stations (not shown) 
based on, e.g, AMPS, NAMPS, CDMA or TDM A communication standards, for processing both local mobile station location requests 
and more global mobile station location requests via, e.g., Internet communication between a distributed network of location systems. The 
system uses a plurality of mobile station locating technologies including those based on: two-way TOA and TDOA; home base stations and 
distributed antenna provisioning. Further, the system can be modularly configured for use in location signaling environments ranging from 
urban, dense urban, suburban, rural, mountain to low traffic or isolated roadways. Accordingly, the system is useful for 911 emergency 
calls, tracking, routing, people and animal location including applications for confinement to and from certain areas. 



BNSDOCID: <WO 9810538A1_I_> 




i .'7 <:i v 1 - 



FOR THE PURPOSES OF INFORMAL 
Codes used to identify States party to the PCT on the front pages of pamphlets publishing international applications under the PCT. 



AL 


Albania 


ES 


Spain 


LS 


Lesotho 


SI 


Slovenia 


AM 


Armenia 


Fl 


Finland , . 


. LT . 


Lithuania . . 


:i SK 


Slovakia 


AT 


Austria 


FR 


France 


LU 


Luxembourg 


SN 


Senegal 


AU 


Australia 


GA 


Gabon 


LV 


Latvia 


SZ 


Swaziland 


AZ 


Azerbaijan 


GB 


United Kingdom 


MC 


Monaco 


TD 


Chad 


BA 


Bosnia and Herzegovina 


GE 


Georgia 


MD 


Republic of Moldova 


TG 


Togo 


BB 
BE 


Barbados 


CH 


Ghana 


MG 


Madagascar 


TJ 


Tajikistan 


Belgium 


GN 


Guinea 


MK 


The former Yugoslav 


TM 


Turkmenistan 


BF 


Burkina Faso 


GR 


Greece 




Republic of Macedonia 


TR 


. Turkey 


BG 


Bulgaria 


IIU 


Hungary 


ML 


Mali 


TT 


Trinidad and Tobago 


BJ 


Benin 


IE 


Ireland 


MN 


Mongolia 


UA 


Ukraine 


BR 


Brazil 


IL 


Israel 


MR 


Mauritania 


UG 


Uganda 


BY 


Belarus 


IS 


Iceland 


MW 


Malawi 


US 


United States of America 


CA 


Canada 


IT 


Italy 


MX 


Mexico 


us 


Uzbekistan 


CF 


Central African Republic 


JP 


Japan 


NE 


Niger 


VN 


Viet Nam 


CG 


Congo 


KE 


Kenya 


NL 


Netherlands 


YU 


Yugoslavia 


CH 


Switzerland 


KG 


Kyrgyzstan 


NO 


Norway 


ZW 


Zimbabwe 


CI 


Cote d'lvoire 


KP 


Democratic People's 


NZ 


New Zealand 






CM 


Cameroon 




Republic of Korea 


PL 


Poland 






CN 


China 


KR 


Republic of Korea 


FT 


Portugal 






cu 


Cuba 


KZ 


Kaz&kstan 


RO 


Romania 






CZ 


Czech Republic 


LC 


Saint Lucia 


RU 


Russian Federation 






OE 


Germany 


LI 


Liechtenstein 


SD 


Sudan 






DK 


Denmark 


LK 


Sri Lanka 


SE 


Sweden 






EE 


Estonia 


LR 


Liberia 


SG 


Singapore 







BNSDOCID: <WO 9810538A1_I_> 



* • 




WO 98/10538 



PCT/US97/15933 



10 



IS 



20 



25 



LOCATION OF A MOBILE STATION USING A PLURALITY OF COMMERCIAL 
WIRELESS INFRASTRUCTURES 

RELATED FIELD OF THE INVENTION 



The present invention is directed generally to a system and method for locating people or objects, and in particular to a 
system and method for locating a wireless mobile radio station in a macro base station, distributed antenna, or home base station 
environment. 



Wireless communications systems are becoming increasingly important worldwide. Wireless cellular telecommunications 
systems are rapidly replacing conventional wire-based telecommunications systems in many applications. Commercial mobile radio 
service provider networks, and specialized mobile radio and mobile data radio networks are examples. The general principles of 
wireless cellular telephony have been described variously, for example in U. S. Patent 5.295,180 to Vendetti, et al, which is 
incorporated herein by reference. There is great interest in using existing infrastructures for wireless communication systems for 
locating people and/or objects in a cost-effective manner. Such a capability would be invaluable in a variety of situations, 
especially in emergency or crime situations. Due to the substantial benefits of such a tocation system, several attempts have been 
made to design and implement such a system. Systems have been proposed that rely upon signal strength and triiateralization - 
techniques to permit location include those disclosed in Uj. Patents 4,818,998 and 4,908,629 to Apsell et al. ("the Apsell 
patents") and 4,891,650 to Sheffer ("the Sheffer patent**). The Apsell patents disclose a system employing a "homing-in" scheme 
using radio signal strength, wherein the scr^me deteas radio signal strength transmitted from an unknown location. This signal 
strength is detected by nearby tracking vehicles, such as police cruisers using receivers with directional antennas. Alternatively, the 
Sheffer patent discloses a system using the FM analog cellular network. This system includes a mobile transmitter located on a 
vehicle to be located. The transmitter transmits an alarm signal upon activation to detectors located at base stations of the cellular 
: network. These detectors receive the transmitted signal and transmit, to a central station, data indicating the signal strength of the 
received signal and the identity of the base stations receiving the signal. This data is processed to determine the distance between 
the vehicle and each of the base stations and, through triiateralization, the vehicle's position. However, these systems have 
drawbacks that include high expense in that special purpose electronics are required. Furthermore, the systems are generally only 
effective in line-of-sight conditions, such as rural settings. Radio wave surface reflections, refractions and ground cluner cause 
significant distortion, in determining the location of a signal source in most geographical areas that are more than sparsely 
populated. Moreover, these drawbacks are particularly exacerbated in dense urban canyon (city) areas, where errors and/or 
conflicts in location measurements an result in substantial inaccuracies. 



BACKGROUND OF THE INVENTION 
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Another example of a tocatlM system.usjn&time of arrival and triargulaTjoTi for location are satellite-based systems, 
such as the military and commercial versions of th^Global Positioning Satellite system (GPS). GPS can provide accurate position 



determination (Le„ about 1 00 meters.errpr for the commercial version of GfS) from a ti^e-baxed signal received simultaneously 
from at least three satellites. A ground-based GPS receiver at or near the object to be located determines the difference between 

5 the time at which each satellite transmits a time signal and the time at which the signal is received and, based on the time 

differentials, determines the object's location. However, the GPS is impractical in many applications, The signal powerlevels from 
the satellites are low and the GPS receiver requires a clear, iine-of-sight path to at least three satellites above a horizon of about 60 
degrees for effective operation. Accordingly, inclement weather conditions, such as clouds, terrain features, such as hills and trees, 
and buildings restrict the ability of the GPS receiver to determine its position. Furthermore; the initial GPS signal detection process 

10 for a GPS receWer is relatively long (Le., several minutes) for determining the receiver's position. Such delays are unacceptable in 
many applications such as , for example, emergency response and vehicle tracking. : . • 

. Differential GPS, or DGPS systems offer correction schemes to account for jijn? synchronization drift. Such correction 
schemes include the transmission of correction signals pyera rwo-way radio link or broadcast via, FM. radio station subcarriers. 

. ... These systems have been found to be.awlcward and have met withJimited.success.' - ; , 

15 Additionally, GPS-based.location systems have beei) attempted in which the received GPS signals are transmitted tp a 

central data center for performing location calcij).? tio its. Such systemj have also me^ witfi limited success due, for<exampie, to the 
limited receptton of the^tellite signals and the added expense and complexity of the electronics required for an jncxpsnsive 
; .location mobile station or handset forde&cting and receiving therGPS signals from^the satellite : : ; ; 



20 correlation>tween radio signals and distance betweep ai iase Atatjpn and a mobile station are similarly complex. Repeated 

attempts to solve this problem in the past have been met with only marginal success, factors include terrain undulations, fixed and 
variable clutter, atmospheric conditions, internal racjio cbaracte rtstics of ceHuiarand RC5 systems, su<b as frequencies, antenna 
configurations, modulation schemes, diversity methods,and the physical geometry oMirect; refracted and reflected waves between 
the base stations and the mobile. Noise, such as man-made externally sources (e.g., auto ignitions) and radio system co-channel 

25 and adjacent channel interference also affect radio reception and related performance measurements, such as the analog carrier-to- 
interference ratio (C/l), or digital energy-per-bit/Noise density ratio (E bAio ) and are particular to various points in time and space 



Before discussing real world correlation between signals and distance, it is useful to review the theoretical premise, that 
of radio energy path loss across a pure isotropic vacuum propagation channel, and its dependencies within and among various 
30 communications channel types. 

Over the last forty years various mathematical expressions have been developed to assist the radio mobile cell designer in 
establishing the proper balance between base station capital investment and the quality of the radio link, typically using radio 
energy field-strength, usually measured in microvolts/meter, or decibels. 



The behavior of a mobile radio signal in the general environment is unique.and complicated. Efforts to perform 



domains. 
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One consequence from a location perspective iftliat itie effective ferrgi of values for higher exponents is an increased at 



stationary in geometric relation to the propagation of the radio signals, causes a shadow effea of blocking that perturbs the free 
space loss effea. Perhaps the best known model set that charaaerizes the average path loss is Hata's, "Empirical Formula for 
Propagation Loss in Land Mobile Radio", H. Hata; IEEE Transactionsm-l^ pp. 317-325, August 1980, three pathloss models, based 
on Okumura's measurements in and around Tokyo, "Field Strength and its Variability in VHf and UHF Land Mobile Service", Y. 



Although the Rata model was foiind to be useful for generalized RF wave prediaion ih'ffequericies under i GHz in 
certain suburban and rural settings, as either the frequency and/or dunfr'ihcrtased, predictability decreased. In current practice, 
however, field technicians often have to make a guess for dense' urban ansuburban areas (applying whatever model seems best), 
then installing a base stations and begin taking manual measurements. ; 

In 1991, U.S. Patent 5,055,851 to Sheffer taught that il three ormofe relationships have been established in a triangular 
space of three or more base stations (BSs) with a location database constructed having data related to possible mobile station (MS) 
locations, then arculatioh dictations 'may be performed, which use three distinct P flf measurements to determine an t ,Y, two 
dimensional location, which can ffien be projected onto an area rhaff. the triangulation calcuiation is based on the fact that the ' 
approximate distance of ttie mobile station (MS) from any base station (6S) cell can be calculated based 1 on the received signal 
strength. Sheffer acknowledges that terrain variations affect accuracy; although asnoted above, Slieffer's disclosure does not 
account for a sufficient number of variables, such as fixed and variable' location shadow fading, which are typical irr dense urban 
areas 1 with moving traffic, . -h : ..- 7- ;; * * - M 

■.. Most field research before about 1988 has focused on characteriting (with the objeaiveof Rf coverage prediction) the RF 
propagation channel (Le., electromagnetic radio waves) using a single-ray model, although standard fit errors in regression; 
: proved dismal (e.g., 40-80 dB). Later, multi-ray models were proposed, and much later, certain behaviors were studied with radio 
and digital channels. In 1981, Vogler proposed that radio waves at higher frequencies could be modeled using optics principles. In 
1988 Walfisch and Bertoni applied optical methods to develop a two-ray model, which when compared to certain highly specific, 
controlled held data, provided extremely good regression fit standard errors of within I J dB. 

In the Bertoni two ray model it was assumed that most cities would consist of a core of high-rise buildings surrounded 
by a much larger area having buildings of uniform height spread over regions comprising many square blocks, with street grids 
organizing buildings into rows that are nearly parallel. Rays penetrating buildings then emanating outside a building were 
neglected. 

After a lengthy analysis it was concluded that path loss was a function of three factors: I.) the path loss between 
antennas in free space; 2.) the reduction of rooftop wave fields due to settling; and 3.) the effea of diffraction of the rooftop fields 



higher frequencies, thus providing 'improved graniiianty of ranging correliattonV 

Actual data colleded'm real-worltfenvirM respect to the free space path loss 

equation, giving rise to the creation ol many empirical formulas for 'radio' signaf coverage prediction. Clutter, either fixed or 



Okumura, et al, Review of the Elearical Commonicationslaborstory, Vol 16, pp 825-873, Sept.- Oct. 1968. 
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down to ground level. ; , t . 

However t a substantial diffiqulty^wi^ in practices that it requires a substantial amount of data 

regarding buiWing dimensions, geometry, street width*, antenna gain characteristics for every possible ray path, etc. Additionally, 
it requires an inordinate amount of computational resources and such a model is not easily updated or maintained. . 

Unfortunately, in practice clutter geometry and building heights are random. Moreover, data of sufficient detail is 
extremely difficult to acquire, and regression standard fit errors are poor; i.e. ( in the general case, these errors were found to be 40- 
60 dB. Thus the two-ray model approach, although sometimes providing an improvement over single ray techniques, still did not 
predict RF signal characteristics in the general case to level of accuracy desired (< lOdB). 

Work by Greenstein has since developed fro/n the perspective of measurement-based regression models, as opposed to the 
previous approach of prediaing-first, then performing rneasurement comparisons. Apparently yielding.to the fact that low-power, 
low antenna (e.gJ2-2S feet above ground) height PCS microcell coverage.vyasj^ufficient jn u*an buildings, Greenstein, et al, 
authored "Performance Evaluations for Urban Line-pf-^ight.MicrocellslJsing.a Multi-ray Propagation Moder\ inJEEE Globecom 
Proceedings, 12/91. This paper proposed the idea of forrrjulating regressions based on field measurements usjng small PCS 
microcells in a lineal microcell geomet7 (i.e. t geom«ri?s in which there is aiway.s a Jine-of-sight path between a subscriber's mobile 
and its current microsite). Additionally, Greenstein studied the communication channels variable Bit-Error-Rate (BER) in a spatial 
domain, which was a departure from preyipus research that limited I field measurements to the RF propagation channel signal 
strength alone. However, Greenstein based his finding o,n twt) suspicious assumptions: i) he assumed that distance correlation 
estimates were identical for uplink and downlink transmission paths; and 2\ modulation techniques would fee transparent in terms 
of improved distance correlation conclusions. Although some data held very correlation, other data and environments produced 
poor results. According . 

In 1993 Greenstein, etal, authored ^ lte^urement ? J|as£d Model for Predicting Coverage Areas of Urban Hicrocells", in 
the IEEE Journal On Selected Areas in Communications, Vol. II, No. 7, 9/93. Greenstein reported a generic measurement-based 
model of Rf attenuation in terms of constant-value contours .su/roun!iing ; a given loy-power, low antenna microcell environment in 
a dense, rectilinear neighborhood, such as New York City. However, these contours were for the cellular frequency band. In this 
case, LOS and non-LOS clutter were considered for a given microcell site. A result of this analysis was that RF propagation losses 
(or attenuation), when cell antenna heights were relatively low, provided attenuation comours resembling a spline plane curve 
depicted as an asteroid, aligned with major street grid patterns. Further, Greenstein found that convex diamond-shaped RF 
propagation loss contours were a common occurrence in field measurements in a rectilinear urban area. The special plane curve 
asteroid is represented by the formula: 

x w + y 7/3 = r M . However, these results alone have not been sufficiently robust and general to accurately locate an 
mobile station, due to the variable nature of urban clutter spatial arrangements. 

At Telesis Technology in 1994 Howard Xia, et al, authored "Microcellular Propagation Characteristics for Personal 
Communications in Urban and Suburban Environments", in IEEE Transactions of Vehicular Technology, Vol. 43, No. 3, 8/94, which 
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performed measurement! specifically in the PCS 1.8 to 1.9 GHz frequency band. Xia found corresponding but more variable 
outcome results in San Francisco, Oakland (urban) and the Sunset and Mission Districts (suburban). 

The physical radio propagatioTi channel perturbs signal strength, frequency (causing rate changes, phase delay, signal to 
noise ratios (e.g.» C/l for the analog caie, r or r E b ^ , RF energy r bit, ow average noise density ratio for the digital case) and 
Doppler-shift. Signal strength is usually characterized by:' 

• Free Space Path Loss (l p ) ' - 

• Slow fading loss or margin 

• Fast fading loss or "margin (L^) f 1 ji 



" 10 " The cell designer increases the transmitted power P^ by the shadow fading margin l> low which is usually chosen to bp 

" ; within the 1-2 percentile of the slow fading probability density function (PDF) to minimize the probability of unsatisfactorily low 
■ ■ received power level at the receiver/The P^' level must have enough signal to noise energy level (e;g., 10 dB) to overcome the 
' ! : receiver^ interna;! noise level(e.g.;-l IBdBm in the case of cellular 0.9 GHz), for a minimum voice quality standard. Thus in this 

example' P^ mlist nevWbe beiow -f08 dBm; in order to'ltiaintain the quality stanclard. 
15 ■ ' 'Additionally the short term fast signaiTadi'iig due to multipath propagation is taken into account by deploying fast 

fading itikrgin which is typically als<rchosth ! tb be a few percentiles of the fast fading distribution. The I to 2 percentiles 
: ' tompiiment other network blockage guidelines. For example the cell base station traffic loading capacity and network'transpon 
facilities are usually designed fora t-2 percentile blockage Tactoras well' Hbwevfer, in the worst-case scenario both fading margins 
arc simultaneously exceeded, thus causing a fading margin overloid. 
20 5 In Roy Steele's, text, /foii/e Jbdio tom/ffti/jjti^ 1.8 

GHz band with a transmitter antenna height of 6.4m and a' mobile station receiver antenna height of 2m, and assumptions 
regarding tbtaf path tbss r trainsmittie r poweP wo til d T be calculated as folfbws: ' 



25 



Table I: GSM Power Budget Example 



Parameter ■. •• . ; . 


dBm value 


Will require 


'■slow 


14 




w 


7 , 




"path 


no 




Min. RXpwr required 


•104 








TXpwr = 27 dBm 
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Steele's sample size in a specific ui ban Londor, area of 80,000 LOS measurements arid data reduction found a slow 
fading variance of v : ;• . • ;c ' : v;.-i" 

c = 7dB 

assuming log-normal slow fading PDF and allowing for a I A% slow fading margin overload, thus 
slow = 2a = 14dB - 1 ' 

The fast fading margin was determined to be: 



L &sl = 7dB 

15 In contrast, Xia's measurements in urban and suburban California at 1.8 GHz uncovered fiat-land shadow fades on the 

order of 25-30 dB when the mobile station (MS) receiver was traveling from ioi to non-LOS geometries. In hilly terrain fades of 
+ 5 to -50 dB were experienced, thus it is evident that attempts to correlate signal strength with mobile station ranging distance 
suggest that error ranges could not be expected to improve below 14 dB, with a high side of 2S to 50 dB. Based on 20 to 40 dB per 
decade, Corresponding error ranges for the distance variable would then be on the order of 900 feet to several thousand feet, 

20 depending upon the particular environmental topology and the transmitter and receiver geometries. 

Although the acceptance of fuzzy logic has been generally more^rapidjn.non-American countries, the principles of fuzzy 
logic can be applied in wireless location. Lotfi A. Zadeh's article, "Fuzzy Sets" published in 1965 in Information and Control, vol. 8, 
Pg 338-353, herein incorporated by reference, established the basitprirtd^les of fuzzy logic, among which a key thorem, the FAT 
theorem, suggests that a fuzzy system with a finite set of rules can uniformly approximate any continuous (or Borel-measureable) 
25 system. The system has a graph or curve in the space of all combinations of system inputs and outputs. Each fuzzy rule defines a 
patch in this space. The more uncertain the rule, the wider the patch. A finite number of small patches can always cover the curve. 
The fuzzy system averages patches that overlap. The Fat theorem was proven by Bart Kosko, in a paper entitled, "Fuzzy Systems as 
Universal Approximators", in Proceedings of the First IEEE Conference on tuny Jf/tff/zM, Pages 1153-1162, in San Diego, on March, 
1992, herein incorporated by reference. 

30 Fuzzy relations map elements of one universe, say T, to those of another universe, say T, through the Cartesian 

product of the two universes. However, the "strength" of the relation between ordered pairs of the two universes is not measured 
with the characteristic function (in which an element is either definitely reflated to another elemetn as indicated by a strength 
value of T, or is definitely not related to another element as indicated by a strength value of "0", but rather with a membership 
function expressing various "degrees" of strength of the relation on the unit intergval [0,1]. Hence, a fuzzy relation R is a 
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mapping from the Cartesian space X x Y to the interyaj : [0,j.]; vfbf re the strength of the mapping is expressed by the membership 
function of the relation for ordered pairs from the two universes or n R (x,y). 

Just as for crisp relations, the properties of commutativity, associativity, distributivity, involution and idempotency all 
hold for fuzzy relations. Moreover, DeMorgan's laws hold for fuzzy relations just as they do for crisp (classical) relations, and the 
5 null relations 0, and the complete relation, E, are analogous to the null set and the whole set in set-theretic from, respectively. The 
properties that do not hold for fuzzy relations, as is the case for fuzzy sets in general, are the excluded middle laws. Since a fuzzy 
relation R is also a fuzzy set, there is overlap between a relation and its complement, hence. 

RuR'^E 
R n R' * 0 

10 As seen in the foregoing expression, the excluded middle laws (or relation do not result in the null relation, 0, or the 

complete relation, E. Because fuzzy relations in general are fuzzy sets, the Cartesian product can, be defined as a relations between 
two or more fuzzy sets. Let A be a fuzzy set on universe X and B be a fuzzy set on universe Y; then the Cartesian product between 
fuzzy sets A and B will result in a fuzzy relation R, which is contained within the full Cartesian product space, or 

AxB^Rc XxY ■■■ !: : ;V * 

15 where' the fuzzy relation RbaimembenHjp^unaioS:' V:> ' " : ' ! 

,,^1=^(^ = P^ ; .,•< - (■. 

f uzzy composition can be defined just as it is for crisp (binary) relations. If R is a fuzzy relation on the Cartesian space 
X x Y, and S is a fuzzy relation on the Cartesian space Y x Z, and T is a fuzzy relation on the Cartesian space X x Z; then fuzzy 
max-min composition is defined in terms of the set-theoretic notation and membership function-theoretic notation in the following 
20 manner 

M*>y) = v (MifaT) A Msfar)) = max { min [m(x,y), ^ s (y,z) ] } 

The fuzzy extension principle allows for transforms or mappings of fuzzy concepts in the form y = f(x). This principle, 
combined with a compositional rule of inference, allows for a crisp input to be mapped through a fuzzy transform using 
membership functions into a crisp output. Additionally , in mapping a cariable x into a variale y, both x and y can be vector 
25 quantities. 
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SUMMARY OF THE ipENTJON , ; 

OBJECTS OF THE INVENTION 

li is an objective of the present inventions provide a system and method for determining wireless location using one or 
5 more commercial mobile radio telecommunication systems for accurately locating people and/or objects in a cost effective manner. 
Related objectives forthe present invention include providing a system and method that: 

(1) can be readily incorporated into existing commercial: wireless telephony systems with lew, if any, modifications of a 
typical telephony wireless infrastructure; ; - 

(2) can use the native electronics of typical commercially available telephony wireless mobile stations (e.g., handsets) as 
10 location devices; .. • ., • • .. ; .; - •, ; . . •• : ..• • . ; ,..-;r • • ^ t 

(I) can be used for locating people and/or objects residing indoors. «. p. ; > : , ; 

Yet another objective i$ to provide a tow cost tocattoa system and method; adaptable to wireless telephony systems, for 
: • using wmuttaneously a plurality of base stations owned and/pr operated by competing commercial mobile radio service providers 
; within a common radio coverage area, in order. tp achteveTCC phase 2 accuracy requiremejus,, and for .syn^rgistically increasing 
15. mpbile station location accyra^ and consistency. ., , ..... , . . . c: . 

, v , Yet another objective is to provide a ipw cost location system and method, adaptable to wireless tetephony systems, for 

; . using a plurality of location techniques In particutar* at least some of the following mobile station location techniques can be 
utilized by various embodiments of the present invention: - r >: , K: , : . ^ 

•time-of-arriyal wireless signal processing techniques; - : -n-nr ..; ; r;-:.vv \*:v..ak :t 
20 •time*diffefence-of*arrival wireless signa! processing techniques? ^ : r?.;.v .r-' 

•wireless signal processing techniques. 

Yet another objective is to provide a system and method for flexible delivery of location information to Public Safety 
Answering Points, end users, centralized dispatchers, as well as to agents (either human or mechanized) associated with trigger- 
based inventory and tracking systems, flexible delivery used hers indicates providing location via various two dimensional closed- 
25 form shapes, such as polygons, ellipses, etc., which bound the location probabilities, in cases where height location information is 
known, the bounding shape may. be three-dimensional. < • 

Yet another objective is to provide a system and method for a variety of new location-based services for public and 
private group safety, including family support functions. 

Yet another objective is to provide a system and method for National Scale Wireless Location capability. Although the 
JO primary focus of this patent is to provide wireless location with accuracy to meet the f CC phase two requirements, a system and 
method is provided that also utilizes roaming signaling to determine in which city is a particular wireless mobile station located. 
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Yet another objective is to provide and system and method for Parametric-driven, intelligent agent- based location 
services. Parameters may include time, location, and user-specific and/or group specific criteria. 



plurality of other mobile station users when a mobile station ther travel into, or away (rom, one or more zones or are within short 
distances of shopping malls, stores, mefdtafidising deatefs etc. : - f : » 

Yet another objective is to prdvkle' notification messages and ( /or ; voice-syrithesized call or text paging functions to a 
. plurality of other mobile station users when a mobile station diafs a redefined telephone' number, such as 91 !, or a type of "mild 
emergency cry for help* number. < : ' . 

. : Yet another objective isto provide nocincatiorrmessagesrand/or voice-synthestzed calf or text paging function to a 
plurality of other mobile station users when a mobile station user dials a predefined telephone number, such as 3 1 1 , or a type of 
mild emergency cry for help number, wherein the plurality t>f other mobile station users are within a particular distance, or a 
minimurn distance to the mobile station riser Who dialed the predefihfeti'riumber. : 

Yet another objective is to provide notification messages and/or voice-synthesized call or text paging f unction to a 
plurality of other mobile station users when a mobile station user* (Rails a predefined telephone number, such as 3 1 1 , or a type of ±. 
mild emergency cry for help number, wherein the plurality of other' mobile ttaftion users are within a particular distance, or a 
minimum distance i6 M mobile station user who dialed the predefined number, and wherein the other mobile station users are 
provided individualized directional or navigation information from their current locations, to reach to tile mobile station user who 
dialed the predefined number. -i q a , ^ t * 

Yet another objective is to provide automatic home: of fice/vehicle and boat security functions, which are activated and ~ 
deactivated based on a mobile station userYkation to or away from a location associated with the security functions. 

Yet another objective is to provide notifications (e.g., via fax, page, e-mail, text paging or voice synthesized call 
message), or to setup a group conference call capability to a plurality of predefined individuals, based on a mobile station user's 
call to 91 1, or based on a mobile station user's traveling into or away from a location zone or area, or based upon a sensor input 
signal to the user's mobile station, such as a sudden change in G forces, such as falling down, having the car hit another object 
suddenly, air bag deployment, etc. 

Yet another objective is to provide location information to a "searcher 1 mobile station user who then further refines or 
narrows the scope. of the location/search for a 'target* mobile station, or the mobile station to be located, using a small microwave 
dish, in communication with, or to supplement/replace the searcher mobile station antenna, whose physical orientation is used to 
further determine the target mobile station location, relative to the searcher's mobile station position/orientation. 

Yet another objective is to provide a means to allow more flexible storage, inventory and enhanced user accessibility of 
rental vehicles, by combining location technology of rental car driver carrying his/her own mobile station, along with a mobile 



Yet another objective is to provide a system and method Itfr 'determining and/or enhancing wireless location using one 
or more of the following: (a.) CDMA-based Distributed Antenna technology; (b.) Home Base Stations and AIN technology. 

Yet another objective is to provide notification messages and/or voice-synthesized call or text paging function to a 
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station which remains always aatve and fixed to a rental car. By maintaining accurate location records of rental car locations and 
automatic, remote-control of rental cars (or smart cars) which use the mobile station to telemeter control data to and from the car, 
whose doors, doorlocks, and general accessibility are controlled by a centralized computer system, rental cars can be dropped off at 
convenient shopping center malls, airport parking lots, hotels and at other convenient locations. 
5 Yet another objeaive is to provide location estimates to users carrying mobile stations, via voice synthesis, data circuit 

messaging or text paging. 

Yet another objeaive is to provide a mechanism whereby mobile station users may access and control their subscriber 
profile for location purposes. The location subscriber profile is a persistent data store which contains logic regarding under what 
criteria will that mobile station user allow his/her location to be made known, and to whom. The mobile station user may access the 
10 location profile via several methods, including Internet means, and mobile station handset keypad entry and voice recognition 
circuits. 

Yet another objeaive is to utilize signaling deteaion charaaeristics of other CDMA base stations and systems in a given 
area, owned and operated by a plurality another commercial mobile radio service provider (CMRS provider). By including other 
CMRS providers' infrastruaure in the location estimation analysis process, improvements in location accuracy caji be realized. 
IS ■ 

DEFINITIONS 

: : The following definitions are provided forconvenience i; In general, r the definitiDns here are also defined elsewhere in 
this document as well. ; , •> ^ • . .,. _ ....... 

.(I) ; The term wireless herein is, in genial, an abbreviation jor digital ,w.ireles$,,and in pmuiar; wireless refers to digital 
20 radio signaling using one of standard digita! protocols such as CDMA; TDE IA and GSM,.as oue skilled in the art will understand. 

(2) As used herein, the term mobile station (equrvalentlyv MS) j efers tq a.v/irekss^evice tharis-at least a transmitting 
device, and in most cases is also a wireless receiving deviccisach as a portable radio telephony handset. Note that in some contexts 
herein instead or in addition to mobile station, the following terms .ape 3lso used: personal station (PS), and iocation unit (Lli). In 

: general, these terms may be considered synonymous. However, the later two terms may be used when referring to reduced 
25 functionality communication devices in comparison to a typical digital wireless mobile telephone * 

(3) The term, infrastruaure, denotes the network of telephony communication services, and more particularly, that portion 
of such a network that receives and processes wireless communications with wireless mobile stations, In particular, this 
infrastruaure includes telephony wireless base stations (BS) such as those for radio mobile communication systems based on CDMA, 
TDMA,and GSM wherein the base stations provide a network of cooperative communication channels with an air interface with the 

30 mobile station, and a conventional telecommunications interlace with a Mobile Switch Center (MSC). Thus, an MS user within an 
area serviced by the base stations may be provided with wireless communication throughout the area by user transparent 
communication transfers (i.e., hand-offs) between the user's mobile station and these base stations in order to maintain effeaive 
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telephony service. The mobile witch center provides communications and control connectivity among base stations and the public 
telephone network. 

(4) An example of a Parametric-driven intelligent agent-based location service follows: An intelligent agent software process 
monitors sets of Parametric conditions and location scenarios. When appropriate conditions and location criteria are satisfied, then 

5 a set of notifications or other actions are triggered to occur. A specific example follows: given that a certain child carrying a mobile 
station should be in a certain school between 8:00 A.M. and 3:00 P.M. on regular school days, then a wirelesi location request is 
invoked periodically, within the school day time frame. If a location request determines that the child's mobile station is located 
substantially outside of the general school area, then a parent/guardian is notified of that fact, and of the child's location via any 
of several methods, such as: (a.) a voice-synthesized telephone message, (b.) various extranet/internet means, such as electronic 
10 mail, netcasting, such as the product Castanet, by Marimba Software, Inc., (c.) fax to a pre-determined telephone number, or (d.) 
alpha-numeric text paging. 

(5) Commercial mobile radio service (CMRS) service provider is the referenced name of the company that owns and/or 
operates a publicly accessible wireless system in the cellular or PU spectrum radio bands. 

SUMMARY DISCUSSION 

IS The location system of the present invention accomplishes the above and other objectives by the following steps: 

(I .) receiving signal data measurements corresponding to wireless communications between an mobile station to 
be located {herein also denoted the target mobile station) and a wireless aphony ir»frastfu<^re>Hereinthe ; mobile station, BS 
and/or mobile switch center may be enhanced in certain novel and cost effective ways so as to provide an extended number of 
. values characterizing the wireless signal communications between the target 1 mofcite station and the' base station infrastructure, 
20 such infrastructure including multipie ( .(Hstin^^^ 

(2;) i organizing and processing thHtgnirtaa measuremems^ceived from a given target mobile station and 
surrounding base station? so that composite wireless signal characteristic values may be obtained from which target mobile station 
location estimates may be derived. In particular, the signal* data measurements are ensembles of samples from the wireless signals 
received from the target mobile station by the base station infrastructure, and from associated base stations wherein these samples 
25 are subsequently filtered using analog and digital spectral filtering. (3.) providing the resultant location estimation characteristic 
values to a mobile station location estimate module, wherein each such model subsequently determines the estimate of the location 
of the target mobile station based on, for example, the signal processing techniques I. through 2. above. ' 

Accordingly, steps (I.) and (2.) above are performed by a subsystem of the invention denoted the Signal Processing and 
Filtering Subsystem (or simply the Signal Processing Subsystem). In particular, this subsystem receives samples of wireless signal 
30 characteristic measurements such as a plurality of relative signal strengths and corresponding signal time delay value pairs, 

wherein such samples are used by this subsystem to produce the component with the least amount of multipath, as evidenced in the 
sample by the short time delay value, wherein each such value pair is associated with wireless signal transmissions berween the 
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target mobile station and ? .particular base station, ofapredetermined^ireleu tese station infrastructure. Extremely transient 
signal anomalies such as signal refcaionfrom tree leaves or the passing of atfuckare likely to be filtered out by the Signal 
Processing Subsystem, for example, such an enseal? of (Jat^ value pairs can bp sirbjeaed to input cropping and various median 
filters employing filtering techniques such as convolution, median digital, fast Fourier transform, Radon transform, Gabar 

5 transform, nearest neighbor, histogram equaluation. input and output cropping, Sobel, Wiener, and the like. 

ft is a further aspect of the present invention that the, wireless personal communication system (PCS) infrastructures 
currently being developed by telecommunication providers offeran appropriate localized infrastructure base upon which to build 
various personal location systems employing the present invention and/or utilizing the techniques disclosed herein. In particular, 
the present invention is especially suitable for the location of people and/or objects using code division multiple access (CDMA) 

10 wireless infrastructures, although other wireless infrastructures, such as, time division multiple access (T.0MA) infrastructures and 
GSM are also contemplated. Note that CDMA personal communications systems are described in the Telephone Industries 
Association standard IS-95, for frequencies below. [ GHz; and in the Wideband Spread - Spectrum Digital Cellular System Dual- Mode 
Mobile Station^ Station Compatibility Standard, for frequencies in the J. 84.9 GHz frequency bands/both of which are 
incorporated herein by reference. Furthermore, CDMA general principles have also, been described, for exafijpls, in U A Patent 

IS 5,109390, to Gilhausen, et al, and CDMA Netyvork Engineering Handbook by Quaicomm, Inc., each of which is also incorporated 
herein by reference. v 

. s . In another aspect pf the present invention, in environments where a home base station capability exists, then wireless 
location can be provided under tertain circumstances, wherein when a f voobile station user ivwithin a predetermined rangeofjor 
"ample, 1000 feeto( his/her premises, the user's mobile station is. detected through; mobile station receiving electronics provided 

20 , in, for example, cordless telephone units as being at. hoflte, Tijus, the local puhlictelepbone switching network may be provided with 
such information for registering that user is at home, and, therefore the mo bife station may be allowed to function as a cordless 
home telephone utilizing the loql s public telephone switching ne^/ork instead of the base station infrastructure. According to this 
aspect of the present invention, the location center of the presem iny?ntion.receives notification from the local pubiic switched 
telephone network that the mobile station is at or near home and utilizes this notification in outputting a location estimate for the 

25 mobile station. 

•n yet another aspect, the present invention includes axapability for locating a target mobile station within areas of 
poor reception for inf rastruaure base stations by utilizing distributed antennas. Mistributed antenna system as used herein is a 
collection of antennas attached in series to a reduced f unction base station, wherein the antennas are distributed throughout an 
area for improving telephony coverage. Such distributed antenna systems are typically used in indoor environments (e.g„ high rise 
30 buildings) or other areas wherein the signal to noise ratio is too high for adequate communication with standard infrastructure 
base stations. Also a distributed antenna system may be located such that its coverage pattern overlaps the area of coverage of 
another distributed antenna system. In such cases each of the overlapping distributed antenna systems includes purposeful delay 
elements to provide different signal delays for each of the overlapping antenna systems and thereby provide muiiipath signals with 
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1 sufficient delay spread for signal dischlrftnati^ Accordingly, the present invention 

receives and utilizes location information communicated ^ for locating a target mobile station. 

That is, the present inventron may recede intormaVion from the base station infrastructure indicating that a target mobile station is 
communicating with such a distributed antenna system and provide "distributed antenna signal characteristic values related to the 
distributed antenna system. Accordingly, to process such target mobile 'station location signal data, the present invention includes a 
distributed antenna system for generating target mobile station location estimate derived from the location signal data obtained 
from the distributed antenna system. ' v ^ . , 

* The location system iof ihe present invention offers many advantages over existing location systems. The system of the 
- present invention; for example, is readily adaptable to existing wireless communication systems' kd can accurately iocate people 
and/or objects in a 1 cost-effective manner/In particular, the present invention requires few/if any, modifications to commercial 
wireless communication systems for implementation: Thus, existing personal communication' system infrastructure base stations 
and other components of, for example; commercial CDMA infrasttiiaures are readily adapted to the present invention. The present 
invention can be used to locate people and/or objects that are not in the iine-of-sight of a wireless receiver or transmitter, can 
reduce the detrimental effects of multipart on the accuracy of the location estimate* can locate people and/or objects located 
indoors as well as outdoor*; and uses a' number of wireless itatiortary transceivers for locatioh. The present invention employs a 
number of distinctly different location computational models for location which provides a greater degree of accuracy, robustness 
and versatility than is'possible witti existing syiterrisl for insrihcV, the location minleli provided include not only the radius- 
■ radius/TOA arid TDOA techniques but also'adaptive neural netVechhiques. f urther, the present invention is able to adapt to the 
topography of an area in Which location service is desired. The present invention ii also' able to adapt to environmental changes 
substantially as frequently as desired. Thdi; the presekliiventioh iVable tb'u into a'ccdunt changes in the location topography 
over time witlwutekt^ >v : 1 1 ; * i; ^ ' ..*;.»•-- 

-Moreover, "there are mimerous a^ systern of the present invention when applied in COMA 

communication systems. 'The location system of the present invention readily benefits from the distinct advantages of the CDMA 
spread spectrum scheme, namely the exploitation of radio frequency spectral efficiency and isolation by (a) monitoring voice 
activity, (b) management of two-way power control, (c) provision of advanced variable-rate modems and error correcting signal 
encoding, (d) inherent resistance to fading, (e) enhanced privacy, and (f) multiple "rake" digital data receivers and searcher 
receivers for correlation of signal multipaths. 1 

Additionally, note that this architecture need not have all modules co-located. In particular, it is an additional aspect of 
the present invention that various modules can be remotely located from one another and communicate with one another via 
telecommunication transmissions such as telephony technologies and/or the Internet Accordingly, the present invention is 
particularly adaptable to such distributed computing environments, for example, some number of the location center modules may 
reside in remote locations and communicate their generated hypotheses via the Internet. 

In an alternative embodiment of the present invention, the processing following the generation of location estimates by 
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the modules may be such that this processing can be provided on Internet user nodes and the modules may reside at Internee server 
sites. In this configuration, an Internet user may request hypotheses from such remote modules and perform the remaining 
processing at his/her node. 

Of course, other software architectures my also to used in implementing the processing of the location center without 

5 departing from scope of the present invention., In particular, object-oriented architeaures are also within the scope of the present 
invention. For example, the modules may be object methods on an mobile station location estimator object, wherein the estimator 
object receives substantially all target mobile station location signal data output by the signal filtering subsystem 20. 
Alternatively, software bus architectures are contemplated by the present invention, as one skilled in the art will understand , 
wherein the software architecture may be modular and facilitate parallel, processing. 

10 One embodiment of the present invention includes providing the location of a mobile station (MS) using the digital air 

interface voice channel and an automatic call distributor device. This embodiment provides location information to either the 
initiating caller who wishes to learn of his location, using the voice channel, and/or location information could be provided to 
another individual who has either a wireline or wire less telephone station. ^ 

Another embodiment of the present invention includes providing the location ol a mobile station using the digital air 

IS interface voice channel and a hunt group provided from a central office or similar device. This embodiment provides location 
information to either the initiating caller who wishes to learn of his location, using the yoice. channel, and/or location information 
could be provided to another individual who has either, a wireline or wireless telephone station,, ; 

, Another embodiment of the present invention includes providing the location of a mobile station using the digital air 
interface text paging, or short message service channel and a hunt group provided from a central office or similar device. This 

20 embodiment provides location information to either the initiating caller who wishes to learn of his location, using the voice channel, 
and/or location information could be provided to another individual who has either a wireline or wireless telephone station. 

Another embodiment of the present invention includes providing the location oi a plurality of mobile stations using the 
public Internet or an intranet, with either having the ability to further use "push", or "n«casting" technology . This embodiment 
provides location information to either the initiating Internet/Intranet user who wishes to learn of one or more mobile station 

25 locations, using either the Internet or an intranet Either the mobile station user to be located can initiate a request for the user to 
be located, or an internet/intranet user may initiate the locatiqn,request Optionally the .location information could be provided 
autonomously, or periodically, or in accordance with other logic criteria, to the recipient ol the location information via the 
Internet or a intranet As a further option, location information can be superimposed onto various maps (e.g., bit/raster, vector, 
digital photograph, etc.) for convenient display to the user. 

30 Yet another embodiment of the present invention includes providing a multicast notification to a group of mobile 

station users, based on distress call from a particular mobile station, wherein the group of mobile station users are relatively 
nearby the distress caller. The multicast notification provides individual directions for each group mobile station user, to direct 
each user to the fastest route to reach the distressed caller. 
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Further features and advantages of the present invention are provided by the figures and detailed description 



accompanying this invention summary. 

BRIEF DESCRIPTION OF THE DRAWINGS , 

: 1 '" Fig. I illustrates an overall view of a wireless location system and method for using multiple commercial mobile radio 

5 ' service providers; 1 

Fig. 2 shows is a high level wireless location architecture using the intelligent network, which illustrates aspects of the 
home base station and internet connectivity for receiving location requests and for providing location estimates; 

Fig. 3 illustrates how the signals from the base stations associated with' various multiple commercial radio service 
providers can be shared with the wireless location system to provide an improved geometry "and thus improved wireless location 
10 accuracy. 

' ' Fig, 4 shows how the mobile station database in the location iystem is updated via interfaces in communication with 
multiple commercial mobile radio service providers using customer care systems. 

'* f Fig. 5 shows a method of direct access to multiple CMRS base sutions, from the location system perspenive v thus 
' '''"avoiding the need to significantly modify network infrastfuatire systems; ' 
15 ' ' ' Figi illustrates physical components and the effects of predetermined signal delay, and total system delay in a 
distributed antenna environnient for purposes of wirelhsloationt 1 ' * * 
Fig. 7 shows the timing relationships among the sigiials within a distributed antenna system. 
Fig. 8 shows a flowchart of the methods and procedures required" to implement a OA database; ' 
Fig. 9 illustrates an exemplary DA configuration with a direct antenna connection to the base stations; 
20 ' Fig. 10 illustrates an alternative DA configuration using multipoint microwave; 

Fig. II illustrates how multiple base stations could be u«d via a microwave circuit to provide PCS and location service 
to a multilevel building via virtual pilot channels; 

Fig. 12 shows the DA delay spread ranges possible for a 500 microsecond guard zone; 
Fig. 13 shows DA-cel! layout a geometry and how location geometries can be constructed; 
25 Fig.14 illustrates the realization of actual measurements and classification utilized within DA cell ranges to determine a 

percent range within each cell 

Fig. 15 shows the standard components of a CDMA MS. 

Fig. 16 shows one embodiment for MS modification that facilities enhanced RF measurement telemetry. 
' Fig. 17 shows how the LC is used in a Home Base Station architecture. 
30 Fig. 18 illustrates a typical case where signals from three base stations can be detected. 

Fig. 19 illustrates a typical case where signals from four base stations (including remaining set information) can be 

detected. 
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Fig. 20 shows a MS detection scheme with a two base station geometry! 

Fig. 21 illustrates a typical amorphous location i^rea w|th,onJy the signal dejection of a single base station sector, by a 



US. 



Fig. 22 shows a series of typical reverse path CDMA RF measurements. in a dense urban area. 

Fig. 23 shows a series of typical reverse path CDMA RF measurements in a rural setting. ; = f . 

Fig. 24 shows a typical Location Center connection ito a GTIA Model. v 

Fig. 25 shows a typical national Location Center and relevant network connections. t - , 

Fig. 26 illustrates a typical three dimensional delay spread profile. 

Fig. 27 shows the. magnifying effects of convolving similar-property forward and reverse-path three-dimensional 



10 images.. 



Fig.7.8 illustrates an image and relief representation of a CDMA Delay Spread Profile. ■> v ! 
Fig. 2? illustrates the main components .of the Signal Processing Subsystem 20. . 
Fig. JO illustrates an image, based on an U signal measurement sample set,. befcre : image histogram equalization 
filtering is applied. ; . . ..- •; 

15. \ Fig.3l illustrates an image basectpn an RF signal measurementsample ser»after image his%ogramequalizatioh input 

. cropping filtering is applied. , r ; _. .; ; — :., v ■ ; ;; ■. . . ., 

Fig. 32 illustrates an image sampie gnd before iritage filtering. t . ; . s 
, , r , :t f . Fig. 33 shows a CDMA : pforile image^after input frqpping is ^^ed at a level of 50 percent. 

Fig. 34 illustrates the resulu of combining input^oppi^ then performing four by four median filtering 

20 on the resultant. .. ( r.r^-v":'r» :.p y^s^ ■.- ;- ,v ;<-.- 

Fig. 35 shows the resultstrf conibining. j^p^t^crppping at 50 7 percent with four by *o»r;-rnedian fiStering^ 
Fig. }6 illustrates how toation estimates can be provided using voke channel connections via an ACQ and Internet 
technology. ,., f , ■■>■■,:■.'■«'. ,. 

Fig, 37 shows wireless Location of a MS using the Voice Channel from Group. 
25 fig. 38 illustrates how location information can be provided via Text paging or short message service messaging. 

Fig. 39 shows how location information of an MS can be provided via Internet via "Push" technology. 
Fig. 40 illustrates how location directions an be provided to nearest members, regarding directions for each individual 
member to reach a distressed HS caller. 

Fig.4l illustrates how traveling instructions from two different points can be provided to an initiator. 
30 Fig.42 illustrates how wireless location services can be used to facilitate automotive rental car tracking and control. 

Fig. 43 indicates the addition of a fuzzy logic module which discretizes the wireless location estimate output from the 
TOA/TDOA locaton estimator module. 



SUBSTITUTE SHEET (RULE 26) 



BNSDOCID: <WO 8810538A1J_> 



WO 98/10538 PCIYUS97/15933 

DETAILED DESCRIPTION ^ , 

vr ■ Various digiul wireless conrniurritatton standards have been introduced such as code division multiple access (CDMA) 

and Time Division Multiple Access (TDMA) (e.g., Global Systems Mobile (GSM). These standards provide numerous enhancements 
for advancing the quality and communication capacity for wireless applications. Referring to CDMA, this standard is described in 
S the Telephone Industries Association standard IS-95, for frequencies beiow I GHz, and in J-STD-008, the Wideband Spread- 
Spectrum Digital Cellular System Dual-Mode Mobile Staiio'n-Base station Compatibility Standard, for frequencies in the 1.8 - 1.9 
GHz frequency bands. , : ^ . : , . 

Additionally, CDMA general principles have been described) forexample, in U.SJ Patent 5,109390, Diversity Receiver in a 
. j - CDMA Cellular Telephone System, by Gilhousen: There are numerous advantages of such digital wireless technologies such as CDMA 

10 radio technology, for example, the CDMA spread spectrum scheme exploits radio frequency spectral efficiency and isolation by 
monitoring voice activity, managing two-way power control, provision of : advanced variable-rate modems and error correcting 
signal design, and includes inherent resistance to fading, enhanced privacy, and provides' for multiple "rake" digital data receivers 
: and searcher receivers for correlation of multiple physical propagation paths, resembling maximum likelihood detection, as well as 
support for multiple base station communication with a mobile station, i.e., soft or softer hand-off capability. When coupled with 
■ IS a location center as described herein, substantial improvements in radio location can be achieved, for example, the CDMA spread 
spectrum scheme exploits radio frequency spectral efficiency and isolation by monitoring voice activity, managing two-way power 
control, provision of advanced variable-rate modems and error correcting signal design, add includes inherent resistance to fading, 
enhanced privacy, and provides for multiple "rake" digital data' receivers and searcher receivers for correlation of multiple physical 
propagation paths! resembling maximum likelihood detection, as well as support for multiple 4 base station communication with a 

20 mobile station, i.e., soft hand-off capability. Moreover, this same advanced radio communication infrastructure can also be used 
for enhanced radio location. As a further example/the capabilities of 1S-4I ami AIN already provide a broad-granularity of wireless 
location, ais isnecessary to, for exam))le, properly direct a termiftatihg : calf to ( a mobile station. Such information, originally 
intended for call processing usage, can be re-used in conjunction with the location center described herein to provide wireless 
location in the large (i.e., to determine which country, state and city a particular mobile station is located) and wireless location in 

25 the small (i.e., which location, plus or minus a few hundred feet within one or more base stations a given mobile station is located). 

Fig. I illustrates a wireless location network using two commercial mobile radio service provider networks for the 
present invention. Accordingly, this figure illustrates the interconnections between the components of a typical wireless network 
configuration and various components that are specific to the present invention. In particular, as one skilled in the art will 
understand, a typical wireless network includes: (a) a mobile switching center (MSC) 12a; (b) generally a service control point 4a, 

30 and base stations (not shown) which are in communication with a mobile switch center 12a. Within a typical metropolitan area it is 
also common for a second commercial mobile radio service (CMRS) provider to offer wireless service within essentially simitar 
coverage areas, such systems typically including an mobile switch center 12b, service control point 4b, and associated base stations 
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(not shown). Added to this wireless network, the present invention provides the following additional components: 

(I) a location system or center 42 which is required for determining a location of a target mobile station using 
signal characteristic values as measured by the target mo Bile station (not shown) and nearby base stations (not shown), further 
consisting of the loilowing modules or subsystem components: 
S (1.1) an application programming interface 14, for physically interfacing with and controlling the messaging to and 

from each CHRS mobile switch center 12a, 12b, service control points 4a and 4b, receiving location requests from either the mobile 
switch center I2a, or 12b, or the internet 68, and providing connection to the signal processing subsystem 20; 

(I J) a signal processing subsystem 20, which is in communication with the application programming interface 
(API) 14. The signal processor 20 receives, queues, filters and processes signal measurement messages into various formats suitable 
10 for the location estimate modules DA 10 and TOA/TDOA 8; 

(I J) a TOA/TDOA location estimate module 8, in communication with the signal processing subsystem 20. The 
TOA/TDOA module 8 provides a location estimate result, using a time of arrival or a time difference of arrival technique based on 
conditioned signals from the signal processing subsystem 20; in addition the TOA/TDOA module may also process signals from the 
distributed antenna module 1 0, in order to provide a location estimate within environments containing distributed antenna 
15 systems; 

(1.4) a distributed antenna (OA) module 10, which receives signals related to distributed antennas, from the signal 
processor 20 in communication a location estimating capability for utilizing one or more distributed antenna systems 168 as shown 
in Fig. 2, wherein each such system 168 provides wireless location information for an MS 140 within the area in communication 
with one or more distributed antenna system 168. 

20 (1.5) a home base station module (HBS) 6 in Fig. I, which receives signals from the controller 14 and determines 

wireless location (i.e., providing a location estimate result) based on registration principles of the wireless user's mobile station 
when in communication with the user's home base station (not shown) in communications with a given service control point 4a or 
4b, containing attome base station application (not shown). 

Since home base stations and distributed antenna systems can be located on potentially each floor of a multi-story building, 

25 in such cases where infrastructure is installed, the wireless location technology described herein can be used to perform location in 
terms of height as well as by Latitude and Longitude. 

Referring to Fig. 2, additional detail is provided of typical base station coverage areas, sectorization, and high level 
components used in the present invention's scope, including the mobile switch center 1 12, a mobile station 140 in communication 
with a home base station 160, and communication between the location system 42 and the public internet 468, via an Internet 

30 service provider interface 472. A novel aspect of this invention includes providing wireless location estimate information to various 
designated users via the public Internet. Although base stations may be placed in any configuration, a typical deployment 
configuration is approximately in a cellular honeycomb pattern, although many practical tradeoffs exist, such as site availability, 
versus the requirement for maximal terrain coverage area. To illustrate, such exemplary base stations (BSs) 122a through I22g are 
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shown, each of which radiate referencing signals within their area of coverage to facilitate mobile station (MS) MO radio frequency 
connectivity, and various timing and synchronization Jundpns. A |iy^n base station may contain no sectors (not shown) t thus 
radiating and receiving signals in a 360 degree omnidirectional coverage area pattern, or the base station may contain "smart 
antennas" (not shown) which have specialized coverage area patterns. 
5 Alternatively and generally most frequent are base stations having three sector coverage area patterns. Shown in Fig. 2, 

each sector for base station 122a through I22g contains three sectors, labeled a, b, and c, which represent antennas that radiate 
and receive signals in an approximate 120 degree arc, from an overhead view. As one skilled in the art will understand, actual base 
station coverage areas generally are designed to overlap to some extent, thus ensuring seamless coverage in a geographical area. 
Control electronics within each base station are used to communicate with a given mobile station 140. further, during 

10 communication with the mobile station the exact base station identification and sector identification information are known and 
are provided to the location center 142. 

The base stations located at their cell sites may be coupled by various transport facilities 176 such as leased lines, 
frame relay, T-Carrier links, optical fiber links or by microwave communication links. 

When the mobile station is powered on and in the idle state, it constantly monitors the pilot signal transmissions from 

15 each of the base stations located at nearby cell sites. As illustrated in Fig. 3, base station/sector coverage areas may often overlap 
both in the context of a single CURS base station network, and also in the context of multiple CMRS base station networks, thus 
enabling mobile stations to detect, and, in the case of certain technologies, communicate simultaneously along both the forward 
and reverse paths, with multiple base stations/sectors, either with a single CMRS network or, in the case of hand-of f s and roaming, 
multiple CMRS network equipment. In fig. 3 the constantly radiating pilot signals from base station sectors 122a, 122b and 122c are 

20 detectable by mobile station 140 at its location. The mobile station 140 scans each pilot channel, which corresponds to a given base 
station/sector ID, and determines which cell it is in by comparing signals strengths of pilot signals transmitted from these 
particular cell-sites. 

The mobile station 140 then initiates a registration request with the mobile switch center 1 12, via the base station 
controller 174. The mobile switch center determines whether or not the mobile station 140 is allowed to proceed with the 
25 registration process (except in the case of a 91 1 call, wherein no registration process is required). At this point calls may be 
originated from the mobile station 140 or calls or short message service messages can be received from the mobile switch center 
112. 

As shown in Fig. 2, the mobile switch center 112 communicates as appropriate, with a class 4/5 wireline telephony circuit 
switch or other central offices, with telephone trunks in communication with the public switch telephone network (PSTN) 24. Such 
30 central offices connect to wireline stations, such as telephones, or any communication device compatible with the line, such as a 
personal or home base station. The PSTN may also provide connections to long distance networks and other networks. 

The mobile switch center 1 12 may also utilize IS/41 data circuits or trunks 522, which in turn connects to a service 
control point 104, using, for example, signaling system #7 (SS7) signaling link protocols for intelligent call processing, as one 



SUBSTITUTE SHEET (RULE 26) 



W098/TO538 PCT/US97/15933 

skilled in the art will understand. In the icase of wireless advanced intelligent network (AIN) services such trunks and protocols are 
used for call routing instructions of calls ihteraictihg with tte mobiie switch center i 12 or any switch capable ol providing service 
switching point functions/ind the public switcted t^iepfibne network (PSTN) 24/with possible termination back to the wireless 
network. In the case of an mobile station 140 in commiihication with a corresponding home or office base station (HBS) 160, the 
5 HBS 160 controls, processes and interfaces the mobile station 140 to the PSTN 24, in a manner similar to a cordless telephone 
system, except that added AIN logic within, for example, the service control point (SC?) I OA is used to- determine if the mobile 
station 140 is being controlled by the HBS 160 or a wireless base station 122. Regarding non : HBS calls, the mobile switch center 112 
may direct calls between mobile stations 140 via the appropriate cell site base stations 122 a through I22h since such mobile 
stations 140 do not typically communicate directly with one another in such wireless standards as CDMA, TOMA NAMPS, AMPS and 

10 GSM. n . ....... 

Referring again to Fig. 2, the Location system 42 interfaces withihe mobile switch center 1 12 either via dedicated 
transport facilities 178, using for example, any number ol LAN/WAN technologies, such as Ethernet, fast Ethernet, frame relay, 
virtual private networks, etc., or via the PSTN 24 (nqt shpwn). The location system 42 receives autonomous (e.g., unsolicited) 
autonomous or command/response messages regarding, for example:,^) the wireless network states, including for example, the 

15 fact that a base station has been taken in or out of service, (b) fnpbile station 140 and BS 122 radio frequency (RF) signal 

measurements, notifications from a SCP 104 indicating that an HBS 160 has detected and registered with the SCP 104 the mobile 
station 140 corresponding to the HBS 160, and (c) any distributed antenna systems 168. Conversely, the location system 42 
provides data and control information to each of the above components in (a) * (c). Additionally, the Location system 42 may 
provide location information to an mobile station 140, via a BS 122, using, for example the short message service protocol or any 

20 data communication protocol supported by th$ air interface baetween the base station and the mobile station. Interface 106 
connecting the location system 42 with the service control jwint 104 may also be required jn the event the tope location register 
and/or the home base station AIN function is located in the SCP 104, : ■ , 

Assuming the wireless technology CDMA is used, each, BS 122a, 122b, 1 22c, through 122g uses, a time . offset of the pilot PN 
sequence to identify a forward CDMA pilot channel. Furthermore, time offsets, in CDMA chip sizes, may be re-used within a PCS 

25 system, thus providing efficient use of pilot time offset chips, thus achieving spectrum efficiency. 

The use of distributed antennas is another technique for improving or extending the Rf coverage of a radio coverage area 
120 of a wireless system. Such distributed antennas are typically used in buildings or other areas of dense clutter, such as 
numerous walls, partitions and/or similar structures causing substantial signal attenuation. As shown in Figs. 6,9, 10, II, and \l, 
distributed antennas 168 are typically connected together in a serial fashion for communicating with one or more infrastructure 

30 base stations 122. Distributed atennnas may be connected to the mobiie switch center 112 via various air interfaces, as shown in 
Figs. 10 and 1 1, or alternatively distributed antennas may be connected to the MSC via a directed connection to a base station 122 
as shown in Fig. 9, or via a private branch exchange (PBX) as shown in Fig. 13. 

Referring to Fig. II, distributed antennas 168 are useful particularly in wireless system configurations involving 
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microcells. and potentially indoor environments, such as wireless systems in communication with private branch exchange systems 
(reference Fig. 13) in business offices, and in wireless local loop app|jcations (not shown) as one skilled in the art will understand. 
Additionally, a distributed, ante^m si&nj[icant improvements in decreasing location error, as compared 

with an indoor mobile station 140 (reference. Fig. 1 1) user with a wireless connection to an outdoor, infrastructure base station 122, 
5 as illustrated in Figs.. II, 12, 13 and 14. 

MOBILE STATION DESCRIPTION 

As an example of a mobile station 140, such a mobile station will be described using CDMA technology. Fig. 1 5 
illustrates a typical block diagram of the functional components of a CDMA mobile station (MS) 140, based on the patent, 
"Diversity Receiver in a CDMA Cellular Telephone System", patent number 5,109,390. The MS 140 contains an antenna 510 coupled 

10 through diplexer 512 to analog receiver SI4 and transmit power amplifier 516. Antenna 510 and diplexer 512 permit simultaneous 
transmission and reception of signals through an antenna 510. Antenna 510 collects transmitted signals and provides them through 
' ' diplexer 512 to analog re'cwer 5141 Receiver 5$ receives the RF frequency signals, typically either in the 800-900 MHZ or 1.8-1.9 
GHz band, from diplexer 51 Vforampfifitatidn and frequency down conversion to an intermediate frequency (IF). Translation is 
accomplished through the use of a frequency sjrnth^uer of standard design whfch permits the receiver 514 to be tuned to any of 

15 the frequencies within the designated receive frequency band.' The IF signal is passed through a surface acoustic wave bandpass 
filter, typkai^bf"l.25 Fi HHr1^Mwiifl&, to match the waveform of the signal transmitted by a base station 122. Receiver 514 also 
provides an analog to digital converter (not shown) for converting the IF signal to a digital signal. The digital signal is provided to 
eacli of four or more data receivers (520, 522, 524, and 526), one of which is a searcher receiver (526) with the remainder being 
data receivers, as one skilled in the art will understand. 

20 Analog receiver 514 also performs a open-loop type of power control (unction for adjusting the transmit power of the 

1 mobile station 140 dn the reverse link channel. Receiver 514 measures the forward link signal strength of the signals from base 
stations 122, then generates an analog power control signal'to circuitry in the transmit power amplifier 516, which can effect a 
range up to about Gib dB. The power control for the' transmit power amplifier 516 is also supplemented by a closed-loop power 
control or mobile attenuation code (MAC) coritro) parameter sent to the mobile station 140 via the air (i.e., wireless) interface from 

25 a BS 122, with either the CfiAC or VHAC command (as one knowledgeable in CDMA standards will understand). The MAC can take on 
one of eight values 0 through 7, which effect a closed loop to raise or lower the power correction. The transmit amplifier 5 1 6 may 
utilize one of three transmit power classes when transmitting within a transmitted power control group in the 800-900 MHZ 
cellular band: class I (I to 8 dBW), class II (-3 to 4 dBW), or class ill (-7 to 0 dBW), for a closed-loop range of about " 32 dB. In 
the PCS L8-1 .9 G\\i band five classes are defined: class I (-2 to 3 dBW), class II (-7 to 0 dBW), class 111 (-12 to -3 dBW), class IV (- 

30 1 7 to -6 dBW), class V (-22 to -9 dBW), for a closed-loop range of about " 40 dB. The mobile station 140 power class and transmit 
power level for a communicating mobile station 140 is known to the wireless infrastructure network, and may be utilized for 
location estimation, as is described hereinbelow. 

21 
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The digitized IF signal may contain the signals from several telephone calk together with the pilot channels and 
multipart delayed signals from each of several pilot channels! Searcher receiver 526, under control of control processor 534, 
continuously scans the tirne domain around the ribmtnal time delay offsets of pilot channels contained within the active, candidate, 
neighboring and remaining sets of pilot channels. The initial sets of pilot channels and a defined search window size for each set are 
5 provided by a control message from a BS 122 via the air interface to the mobile station 140. The searcher receiver 526 measures the 
strength of any reception of a desired waveform at times other than the nominal time and measures each pilot channel's arrival 
time relative to each pilot's PN sequence offset value. Receiver 526 also compares signal strength in the received signals. Receiver 
526 provides a signal strength signal to control processor 534 indicative of the strongest signals and relative time relationships. 
Control processor 534 provides signals to control digital data receivers 520, 522 and 524 such that each of these 

10 receivers processes a different one of the strongest signals. Note, as one skilled in the art will understand, the strongest signal, or 
finger, may not be the signal of shortest arrival time, but rather may be a reflected, and therefore delayed, signal (such reflected 
denoted collectively as "multipart"). Data receivers 520, 522 and 524 may track and process multipath signals from the same 
toward channel pilot channel offset or from a different forward channel pilot offset. In the case where a different pilot channel 
offset signal is of greater strength than the current cell site (or more specifically the current base station 122) pilot channel offset, 

1 5 then control processor 534 generates a control message for transmission on a reverse channel from the mobile station 140 to the 
current BS 122, requesting a transfer of the call, or a soft hand-off, to the now strongest cell site Base station 122. Note that each of 
the four receivers 520, $22, 524 and 116 can be directed independently from each other. The three data receivers 520, 522, and 524 
are capable of tracking and dieimoduikting multipatH signals from of the forward COMA pilot channel. Thus data receivers 520, 522 
and 524 may provide reception of information via separate multipath signals from one BS 122 (e.g., in particular, an antenna face 

20 of a sectored antenna at the BS 122, or reception of signals from a number of sectors at the same BS 122, or reception of signals 
from multiple BSs Ii2 or their antenna faces of sectored antennas. Upon receiving a CDMA pilot measurement request order 
command, or whenever, (aj the mobile statibn'UO^eteas a pilot "signal of sufficient strength, not associated with any of the 
assigned forward traffic channels currently afssigned, or (b) the mobile station 140 is in preparation for a soft or hard hand-off, 
then the searcher receiver 526 responds by measuring and reporting the strengths of received pilots and the receiver's definition of 

25 the pilot arrival time of the earliest useable multipath component of the pilot, in units of PN chips (one chip = O.8I3B02 

microseconds). The receiver 526 computes the strength of a pilot by adding the ratios of received pilot energy per chip E ( , to total 
received spectral density, l 0 , of at most k useable multipath components, where It is the number of data receivers supported in the 
mobile station 140. 

The outputs of data receivers 520, 522, and 526 are provided to diversity combiner and decoder circuitry 538 (i.e.. 
30 simply diversity combiner). The diversity combiner 538 performs the function of adjusting the timing of a plurality of streams of 
received signals into alignment and adds them together. In performing this function, the diversity combiner 538 may utilize a 
maximal ratio diversity combiner technique. The resulting combined signal stream is then decoded using a forward stream error 
detection contained within the diversity combiner. The decoded result is then passed on to the user digital baseband circuitry 542. 

22 
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The user digital baseband circuitry 542 typically includes a digital vocoder which decodes the signals from diversity 
combiner 538, and then outputs the results to a digital to afiaiogjf D/A) converter (not shown). The output of the D/A serves as an 
interface with telephony circuitry for providing mobile station 140 user analog output information signals to the user 
corresponding to the information provided from diversity combiner 538. 
5 User analog voice signals typically provided through an mobile station 140 are provided as an input to baseband 

circuitry S42. Baseband S42 serves as an interface with a handset or any other type of peripheral device, to the user for audio 
communication. Baseband circuitry 542 includes an analog to digital (A/D) converter which converts user information signals from 
analog form into a digital form. This digital form is then input to a vocoder (not.shown) for encoding, which includes a forward 
error correction function. The resulting encoded signals are then output to transmit modulator 546. 

1 0 Transmit modulator 546 modulates the encoded signal on a PN earner signal whose PN sequence is based on the 

assigned address function for a wireless all. The PN. sequence is determined by the control processor 534 from call setup 
information that was previously transmitted by a cell site BS 122 and decoded by the receivers 520, 522, 524 as one skilled in the 
art will understand. The output of transmit modulator 546 is provided to transmit power control circuitry 550. Note that signal 
transmission power is controlled partially. by an open-loop analog power control signal provided from receiver 514. In addition, 

15 control bits are also transmitted by the controlling BS 122 in the form of a supplemental closed-loop power adjustment command 
and are processed by data receivers 520. 522,. In response to this command, control processor 534 generates a digital power 
control signal that is provided to the transmit power amplifier 516. Transmit power control 1 550 also provides the digitized and 
encoded user info/njation signals in an IF format to output to the transmit power amplifier 51 6. The transmit power amplifier 5 1 6 
converts the If format signals into an Rf frequency by mixing this signal with a frequency synthesizer (pot shown) output signal for 

20 providing a corresponding signal at the proper output transmission frequency signal. Subsequently, transmit power amplifier 5 1 6 
amplifies the signal to the final power output level. The transmission signal is then output from the transmit power amplifier 516 to 
the diplexer 512. The diplexer 512 then couples the transmission signal to antenna 510 for air interface transmission to the 
infrastructure base stations 122. 

Additionally, note that control processor 534 is also responsive to various control and information req uest messages 

25 from the controlling BS 122, including for example, sync channel messages, the system parameters messages, in-traffic system 
parameters messages, paging/alert messages, registration messages, status requests, power control parameters messages and hand- 
off direction messages, as one skilled in the art will understand. 

Referring still to a CDMA mobile station 140, in one embodiment of the present invention, the above-described standard 
CDMA mobile station architecture in an mobile station 140 is sufficient However, in a second embodiment, this architecture may 

30 be modified in minor, cost effective ways so that additional information may be transmitted from an mobile station 140 to the BS 
122. The modifications for this second embodiment will now be described. The following modifications, either together or in any 
combination, provide improvements in location accuracy from the perspective of capturing RF measurement data: ( I) increasing 
measurement quantity, ( 2) improving measurement transmission, ( 3) extending the pilot set and search, ( 4) extending the pilot 
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signal reporting capabilities, 5) decreasing the Quantization size of the units used to report the pilot PN phase arrival time, 6) 
improving the accuracy of the mobile and base smioo iirne reftrencE, and 7) increasing the number of data receivers and related 
circuitry, for correlation tracking of a larger plurality of pilot channels and each of their multipart signals. 

Using the standard system parameters overhead message in the paging channel as one method of reponing to the base 

5 station the signal strengths and delays of detectable pilot channels, a mobile station has various timers indicating the upper bounds 
of time needed to respond to a request, and to bid for access to the forward channel (if not already using it's assigned traffic 
channel): These timers restrict the frequency of measurement reporting and thus limit the aggregate amount of measurement data 
which can be sent in a gircn time period. 1 

For example, CDMA standard timer T 33m establishes the maximum time of a mobile station to enter the update overhead 

10 information substate of the System access state to respond to messages received while in the mobile station idle state, typically 03 
seconds. Timer T^ the maximum time for the mobile station to respond to one service option request, is typically 0.2 seconds. 
Thus during a period of about ftve seconds, this measurement reporting method would provide for a maximum of about fifteen 
measurements. ^ 

However the same CDMA receiver design infrastructure, with slight circuitry modification can be used to suppon 

IS improved measurement transmission. , : * 

■ In order to collect a data ensemble bi' RF measurements that represents a statistically significant representation of data 
values in a geographical area of interest, it is the intention that the second (CDhA) mouiie station f40 embodiment t>e capable of 
sending to the network base station inii'astruaure approximately 126 samples o! each mutttpath peak signal strength and its 
relative delay, 1 for each detectable pilot chinhtf, in less than a preferred period of about five seconds. In order to transmit this 

20 amount of data; other means are needed to efficiently send the needed data to the network (i.e., from the mobile station to the 
base station, and then to forward data to the wireless switch, and then to forward data to the Location Center). 

' The CDhA air interface standard provides several rr^ans for transmitting data at higher rates. The Data Burst message 
can be used, or various biank-and-butst, dim-and-burst multiplex options can be used, and well as seieaing various service options 
2 through 9, through the setup of a normal voice or data telephone call. In one embodiment, , the user dials a speed number 

25 representing a data-type all to the Location Center 142, which initiates a command to the mobile station 140, responsive by the 
mobile station 140, which then provides the location center 142, via the base station 122, mobile switch center 1 12 with the needed 
measurement data. 

Referring to Fig. 16, in one embodiment a software controllable data connection or path 49 is established between the 
control processor 46, and the user digital baseband 30 functional components in the mobile station, a much larger quantity of KF 
30 measurements, on the order of 128 data samples, can be transmitted as a data burst, multiplexed, or sent by other means such as a 
data circuit all, back to the network, and to the Location Center. Note that the existing connection between the control processor 
534 and the transmit modulator 546 may also be used, as well via any other virtual path, such as software register- to- register 
move instructions, as long as sufficient signal measurement content and data samples can be sent to the wireless network and the 
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location center 142 via the associated , inte^ces. Thos$ skjliejJi^jB aft; will understand the wireless network consists of the base 
. station, mobile switch center; and related igf^str^M/;^ equipment, interfaces .and; facilities circuits to telemeter, the measurement 
content and data samples to the Jratipn.cgnttrJ42. Additional tjestga issues ir\clude, lor example, the faa that existing memory in 
, the mobile station must be allocated to the temporary storage of Rf sample measurements, and new control means, such as 
v r: 5 , selecting a future use control bit pattern in the CDMA air standard, are required to telemeter, preferably upon command, RF 
. measurement sample data to the Location Center 142 in Fig, I. In. the case where a location request is received by the location 
engine 139 in the location center 142, the location engine. 139 initiates a message .to the mobile station 140 via a signal processing 
subsystem and the location center mobile switch center physical interface, the location applications programming interface 136 for 
the mobile switch center 1 12 and the wireless network infrastruaure. . .. . . . -v? . , 

10 . . The addition of a controllable data conneaion or path -49 can bf easily pedormed by CDMA application-specific 
integrated circuit (ASIC) manufacturers. In the case of one ASIC manufacturer kpown to the authors, the Qualcomm ASIC chip 
mobile station modem, model number HSM 2)00, provides both the control processor function S34 and the user digital baseband 
542 functions or the same chip, thus the external pinout physical configuration would not have to change to accommodate the 
wireless location software controllable data conneaion or path 49 modification. , 

1 5 If the mobile station 140 searcher receiver detects 4 pilots with 4 multipaths each, with each measurement consisting of 

a pilot index, finger identification, multipath signal strength, and mulgpath arrival time, then about 480 bytes are needed per 
, , measurement. Aiming the searcher receiver performs one measurement every .10 mS, about I second is needed to compile and 

buffer each sample of J28 measurements per sample, or about 48 kilobytes. Using a f typical 9600 kbps COMA data channel between - 
the mobile station 140 and a BS 1 22, and assuming a £0 . percent overhead, the mobile station can complete the collection and 

20 , transmission of a location measurement sample, in Jess than ten seconds, which is within a reasonable period for satisfying a 
location request v _, ; „ . s ,^ . y) . . . , u . - .... 

■ ., The implementation of the data services required to. tele^ne^er the necessary signal measurements may be performed in 
any of several embodiments. In one embodiment the location signal measurement request-response application message set 
utilizes the air interface services provided by the spare bits and digital control words not currently in the air interface standards IS- 

25 95 and ANSI-J-STD-008. Such bits and control words can be reserved for the purpose of .requesting and providing the required . 
location signal measurements discussed herein. Using this embodiment the base station and. mobile switch center must be modified 
to support the imeraorking function required between the location center and the mobile station. In a second embodiment the 
location signal measurements request-response application message set is implemented using service options 4 and 12. which 
provides asynchronous data transmission capability, as defined in TMSDm Standard, Asyncandfax Sect/on, document number 

30 TIA/EIA/1S-DATA.4. Using this second embodiment, the mobile station control processor provides, or would interface with a 
function emulating mobile termination 0 or 2 services at the R m network reference point The L-API then provides, or would 
interface with a function emulating the physical interface connecting a data circuit-terminating equipment (DCE) to the PSTN at 
the W network reference point, in communication with the PSTN, which is also in communication with reference point Ai, which is 
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in communication with reference point U m , which is in turn in communication with reference point R^. An advantage of this 
embodiment is that no ASIC or circuit board modifications are heeded iiv the mobile station. 

The ANSI standards j-008 and 1S-9S provide several means for the base station 122 to establish and to extend the 
search window size that the mobile station 140 should use in its scanning process; and to identify further pilots. For location 
5 purposes, either existing standard parameters can be extended, or a location message request from the Base station can inform the 
searcher receiver of the mobile station to extend its search range, as necessary, to capture all relevant base station pilots and their 
multipath fingers, in order to complete the location measurement sample. " ' ' 

The search performance criteria defined in AfiSI tS-98; Recommended Minimum Performance Standards for Dual Mode, 
an be increased as appropriate to accommodate a larger set of potentially detectable base stations, including Location Base 
10 stations and Mobile Base stations. Additionally the search window table size tor various search window values must be increased to 
accommodate new pilot channel pn-offsets associated with Location Base Stations and Mobile Base stations. 

Existing standard parameters include, (or example using the In-traffic System Parameters Message, the values 
SRCH_WIN_A (for active and candidate set), SRCH WIN N (for neighboring set), and SRCH_SIN_R (for remaining set) can be 
used to cause the searcher receiver to increase its search area to detect and thus measure as many' pilots as can be detected in the 
1 IS area. Extending the range of T_A0D and TjDROF parameters can also be used to facilitate the mobile to retain data on additional 
pilots in the area. The extended neighbor list message is used to informthe mbbile station of the necessary characteristics of 
neighboring pilot signals. For example if location base stations are used on a different frequency assignment, and/or utilize unique, 
non-public pilot PN sequence offset indices; for example, in using increments other than 64 PN chips, then the extended neighbor 
list message an be used to instruct the mobile station to scan for those types of base stations, accordingly. ' 
20 ' There can be several combinations of Ueiay spread signal strength measurements made available to the location center, 

■' from the mobile station 140. In some cases the mbbile station 1 40 may detect up to three to four pilot channels (representing 3-4 
base stations), or as few as one signal from one pilot channel: > "^'^ > ■ - t; ' 

for each pilot channel deteaion case, multiple, up to three to lour fingers, or multipath signals may be detected per 
pilot channel. 

25 Note that multiple multipath signals, or multiple "fingers" could exist from a less-strong BS pilot signal, or in any of 

several combinations, which can depend widely upon the mobile station's location within the base station environment. 

By modifying the CDMA Base station, mobile station and controller capabilities to provide the location center 142 with 
data that exceeds the 1:1 fingers to data receiver correspondence, additional information can be collected and processed in order to 
further improve the accuracy of the location estimate. A control message from the location center 142 and carried through the 
30 network is sent to the control processor in the mobile station, requiring the searcher receiver in the mobile station o transmit to 
the location center 142 via the network, all detectable delay spread fingers related to each detectable pilot channel. 

In one embodiment the control message is implemented in the CDMA receiver via a multiplexing technique, including 
appropriate manipulation of the hand-off parameters TADDs, T_DROPs, search window and the active, neighbor and remaining 
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pilot sets held within the mobile station; menipjy. ( . , } (1) . V( ... y A , . . . • ■ . 

Although the CDMA ANSI J-STD 008 requires repomng of the pilot channel arrival time in a time period of units of one 
chip size, or 813.802 nanoseconds, typical CDHA r receivers contain an internal Quantization interval of one eighth chip size. 

Within the mobile station, by modifying the time of arrival message response message to output the delay value in unit 
_ v 5 increments of one-eighth chip size, the precision of location accuracy can be increased from about 800 feet in radius to about MO 
feet. At the base station the arrival time measurement is forwarded in one-eighth units to the Location Center. A multiplier function 
applied to the received measurement at the, base station resales the measurement for routine CDMA control and monitoring 
purposes, in order to be consistent with the CDMA standard. In order to. distinguish among several mobile station models which 
report arrival time in either one-eighth chip units or one chip unit sizes, an encoding can be used in the mobile station's hardware 
10 or software identifications, telemetered to the base, station and Location Center, in order to determine the arrival time 

measurement units. In oqe.embodiment the analog, receiver in the mobile station. utilizes a clock signal which runs eight times 
faster than the clock originally disclosed in thf Giihous^en patent, number 5,109,390. in this manner the digital signal provided to 
the data receivers and the searcher receiver. wilLinclud^ an improved resolution in ability to detect delay spread signals, which are 
directly usedto improve wj^less. location. . > 
(S Although the CDMA air interlace sundard only requires a l,000 nanosecond tolerance accuracy within respect to the 

basestation, bationaccura^,cari f be improved if maqufaftunng cali^atiari;precision*s are held to s within tighter tolerances, such 
as (ess than HO nanoseconds. However in any given Iqc^t^ r^eu.' as long a^th^^ba&e station to base station are 
, „. tuned property to an amount less than 500 nanoseconds, trifin.very. good locatiog estimates can be performed due to the self 
canceling time effect geometries typically present in raulti pilot channel deteaioo found in urban and suburban areas. 
. 20 . , Increasing the typica! .num^r af r dat^,rec^iyers ftubile station or base station provide added capabilities to 

.. lock and track more delay spread fingers and respearve hase station pjlot.channe ls r The resulting, additional information, if 
available in a given radio coverage area 120 in Fig. I, can be used, (oren^anced location estimate accuracy due to confluence or 
voting methods which an be deployed at the Location system 142., . } - ; ; ; . 

In certain cases wireless location signals are received representing distributed antennas (or other base stations) across 
25 building floor boundaries being received from a specific floor on a multi-storied building. As a specific example, consider signals are 
being received from both the 40th and the 41th floor; the objective is to resolve the ambiguity of the situation, fuzzy logic is used 
to resolve this ambiguity. The determination as to which floor the user of the mobile station is on is based on the strength of the 
signal, S, and the past reliability of the information associated with the two antennae, R. The spaces of 5 and R are discretized using 
fuzzy sets. The strength is defined as being: (I) VERY STRONG (VS), (2) STRONG (S), (3) WEAK (W), and (4) VERY WEAK (VW) as 
30 defined by membership functions. The reliability of information is defined as being: (I) VERY RELIABLE (VR), (2) RELIABLE (R), 
and (3) NOT RELIABLE (NR), again as defined by membership functions. A fuzzy relation or mapping is described which descretizes 
how confident it is that the signal is coming for a given floor, e.g., the 40th floor, using the following notation: 
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The above relation matriz is read, for example; that when the signal information is RELIABLE and the strength is WEAK, 
then the confidence that the signal is coming from the 40th floor is 0:4. A simitiar fuzzy relation matrix is established for the 
distributed antenna on the 41st floor, and thus the result would be a confidence factor associated with the mobile station being 
5 located on either floor. A single solution, that is, whether the mobib station iv on the 40th or 41st floor is determined using a 
compositional rule of inference. The compositional rule of inference h a funaion that prescribeVa mechanism for consolidating 
mambership function values into a single crisp function. This futiaion can take a variety of forms including max-min composition, 
snax-product composition, etc. The compositional rule of inference can beimplertjented, for example, by a summing junction which 
collects the results of each firing rule. The dimming junction's output is then provided to a centroidal del uzzier which provides the 
i 10 discretiied output. ! - ^ Vl - ■ ■■ ' : - ■ 

fig. 43 indicates the addition of a fuzzy logic module 41 which optionally discretizes the wireless location estimate 
output from the TGA/TDOA locaton estimator module. 6. Jn the above case f uzzy logic rules related to the distributed antenna 
relation matrix would be Hred or activated as a result of exmining the message header data structure that indicates that the 
location estimate was the result of a distributed antenna case around the 40th and 41st floor of a particular building within which 
IS such fuzzy relations exist or in any other localized case sherin such fuzzy relations have been predetermined. Otherwise, in cases 
where no such fuzzy rules apply, the location estimate is passed to the recipient without further discretization. 

Note that the confidence associated with the Ideation of the mobile station can be considered a function of several 
variables, not jus) the two (S and R) described above. For instance, it would not be unreasonable to segregate the reliability 
information by time signal delay as determined within this invention. The fuzzy relation is capable of handling a variety of such 
20 situations. Thus which floor the mobile station is on can be considered to be a function of numerous variables; the ultimate decision 
an be made based on a great deal of information. 

LOCATION CENTER - NETWORK ELEMENTS API DESCRIPTION 

A location application programming interface 14 (fig. I ), or l-API, is required between the location system's 42 signal 
processor 20 and the mobile switch center 1 2 network element type, in order to send and receive various control, signals and data 
25 messages for wireless location purposes. The L-API is implemented using a preferably high-capacity physical layer communications 
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' interface, such as IEEE standard 80O (f0 SiHTtKer interfaces could be used, such as fiber 

\ . optic ATM, frame relay, etc. Two forms of API impleraenuuon are possible. In the first case the signals control and data messages 
are realized using the mobile switch center 1 12 vendor's native operations messages inherent in the product offering, without any 
I special modifications. In the second case the I- API includes a full suite of commands and messaging content specifically optimized 
j 5 for wireless location purposes, which may require some, although minor development on the part of the mobile switch center 

vendor. A minimumset of l-API message types include: - - 

A first message type, an autonomous notification message from the mobile switch center 1 12 to the location system 42, 
is required in the event a wireless enhanced 9-1-1 call has been sent to the mobile switch center from an mobile station MO, 
■ including the mobile identification number (MIN), along with various CMRS identification and mobile station detected active, 
10 candidate,? neighbor and remaining pilot set information, pilot strength measurements message; ■ 

■ , , * A second menage type, forward path request-response message; from. location system 42 to mobile switch center 1 12, is 

; ■ required to request a mobile station (MS) for signal measurements.and hand-off information, with a response message back from 
the mobile switch center 1 12 to the location system 42, along with various CMRS identification; 

A third message type, Reverse-path request-response message, from location system 42 to mobile switch center 1 1 2, to a 
15 BS for signal measurements received at the BS and hand-off information, fora given mobile station MIN. along with various CMRS 
identification. It is preferable for the received signal strength measurements performed at the mobile station along the forward 
path, and at the base station along the reverse path, to be reported in a variable-length data structure as follows: for each pilot 
channel offset, include the phase of the earliest arriving' usable multipath component pilot PN sequence relative to the zero offset 
' pilot PN sequence of this pilot, termed pilot PN phase or pilot arrivaCin units of one-eighth PN chip, instead of units of one PN chip 
20 as stated in the standards. Furthermore, in accordance with the standards, the pilot strength shall be included, measured based on 
at most k usable components, where k is the number of demodulating elements supported by the receiver system. In addition the 
total number of each detectable multipath components shall be reported! In addition each multipath component, for a given pilot 
shall be identified by both its delay component arid signal strength, for inclusion in the signal measurements to the location system 
42. Regarding each individual multipath component, signal strength i* expressed as is commonly known, by adding the ratios of 
25 received pilot-multhpath component energy per chip, E c ,.to total received spectral density (noise and signals), i 0 of at most that one 
mutipath component (Lck is equal to one). , 

A fourth message type, an autonomous notification message from the mobile switch center 1 12 to the location system 
42 is required, in the event of an mobile station hand-off state change, along with various CMRS identification. 

In order to implement additional location functions such as wide area location, wherein location is determined across 
30 roaming boundaries, out-okqverage area conditions or mobile station 140 turned off, and home base station applications, the L- 
API must include access to and receive data from a data store contained in the home location register (HLR) network element type 
associated with the mobile switch center 1 12. 

A fifth message type is required which provides the location system 42 with the mobile station MIN, hand-off, along 
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with various CMRS identification information (e.g., old and new state changes, old and new BS identifications, and hand-ofls to 
another CMRS), roaming location and status changp> v A typical comrpunicatipns^rotocot such as Signaling System number 7, 
running on a V3S communications channel could be used for implementation, but numerous other protocols (e.g., TCIP/IP, ROSE, 
CHISE, etc.) could be used to implement this capability. If the home location register is local to the mobile switch center 112 then 
S the LC - mobile switch center communications link could be used, otherwise a separate communications link is used between the 
location system 42 and the home location registk 

A sixth message type, an autonomous notification message type issued from the location system 42 to the home 
location register, is required for those location applications they rely on an alert from the home location register when ever a 
particular mobile station state change occurs, along with various CMRS identification. Consider the case wherein an mobile station 

10 140 whose location is to be tracked constantly. In such cases a history of locations is maintained in the location system 42. Should 
the mobile station 140 user turn off the power, or exit from the coverage area, then by using previous location values a vector and 
approximate velocity can be determined. This sixth message type provides a notification message from the home location register to 
the location system 42 whenever a previously identified mobile station KIN has a state change. Examples of a state changes include 
cases where the base station 122 discovers the mobile station 140 has traveled to another base station, or that the current primary 

IS base station 122 can no longer communicate with the mobile station 140 (i.e., no power), or that a new registration has occurred. 
In general this message type should support the notification from the home location register to the location system '42 of all 
messaging and data associated with trie nine types of registration, in the case of CDiiA. Specifically these include power-up, power- 
down, timer-based, distance-based, zone-based, parameter-change, ordered, implicit and traffic channel registration. The location 
system 42 should also be informed of the registration enablement status of each type of registration; which can be provided to the 

20 location system 42 via a redirection of the systems parameters message. It should also be possible for the location system 42 to 
initiate an ordered registration through an order message, from the location system 42 to the mobile switch center 1 12. The mobile 
switch center 112 then shall route the message to the appropriate base station, and then to the mobile station. The location system 
42 should also be able to receive the results of the message. 

In order to implement additional location functions such as providing users with location information and routing 

25 instructions to certain locations via the wireless short message text paging service, an L-API is required between the location system 
42 and the network element type used to implement the short message service. Such network elements may be termed an intelligent 
peripheral or a service node. A number of existing paging interfaces have been proposed in standards bodies, and one or more 
modifications an be made to accommodate L-API content. In any case, the following L-API addition is required: a seventh message 
type which allows the location system 42 to send a text message containing location information or instructions to a particular 

30 mobile station HIN, and a related message to verify response. Optionally another, ninth message type, an autonomous message 
may be provided to alert the location system 42 under conditions wherein a state change occurs on a previously pending text 
message. This last message type provides improved quality feedback to the initiating party regarding the acceptance situation of 
the attempted-to-send page. 
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UTILIZING MULTIPLE CMRS INFRASf RUCRJRE IN A SHARED COVERAGE AREA 

^ As a consequence in practical deployment situations that base stations are not placed in a uniform manner in a 

geographical area, and the fact that variable and fixed clutter introduce a variety of signal measurements which can result in the 
5 provision of an ambiguous location estimation, a novel aspect of this patent includes the utilization of the inherent ability of the 
wireless protocol and receiver design to request and receive signal measurements along the forward and reverse air interface 
communications path with a given mobile station and other commercial mobile radio service providers, in cases where multiple 
service providers share a common coverage area. Thus in a coverage area shared by two service providers A and B, utilization of 
received signal measurements from both service provider A and service provider B can be used by the location center as unique, 
10 orthogonal information to both resolve ambiguous location estimates and to further improve the location estimate accuracy. 

The CDMA air interface, for example, provides a soft hand-off capability for the mobile station to hand-off a voice 
communication channel to another base station, and even to another CMRS provider, termed a hard hand-off. 

Referring to Fig. 3 t assume three sectored base stations 122a, 122b, and 122c, in communication with mobile switch 
center-A 1 12a, are owned and operated by CMRS provider A. Further, assume three sectored base stations 1 22d and J22e, in 

IS % communication with mobile switch center-B I I2b, are owned and operated by CMRS provider 8, and that the coverage area with 
CHRS;A aqcKMRS-B substantially overlap. In order taiocate a mobile station HP. whose^subscriber normally does business with 
, CMRS provider A, assume that the receive; of mobile station ,140 can detect signals from base stations J22a, 1.22b, and. 122c, as well 
as from base stations I22d and I22e t although normal mode. use would preclude such measurements from being initiated. Assume 
further that the resulting location estimate 131, generated from the location center 120 contains either an ambiguous location 

20 , estimate value pair, or otherwise cannot render a location estimate with the desired range of accuracy. 

. from an inspection of the overall base station geometry of base stations owned by CMRS A and CMRS B it is evident that 
a strong possibility exists that either I.) the receivers in mobile station 140 have the possibility to detect the pilot channels 
associated with base stations I22d and I22e; 2.) the receivers in base stations I22d and I22e have the possibility to detect the 
transmitter signal from mobile station 140. The location system 142 contains a data store of both CMRS provider's base station 

2S geometeries and is in communication with each mobile switch center - A 1 1 2a and mobile switch center - B 1 12b. An application in 
the location system 142 sends a control message to the mobile station 140, instructing the mobile station to tune its searcher 
receiver to listen for and report back signal measurement data regarding the pilot channel information associated with base 
stations I22d and I22e, in addition to a request to report of pilot signals relative to base stations 122a, 122b, and 1 22c. Similarly 
the application in the location system 142 sends messages to each of base stations I22d and I22e, with instructions to take signal 

30 measurements and report back the resulting information regarding the mobile stations transmitter 1 40. Since the signaling 

information from base stations I22d and I22e are based on a substantially different location geometry, the resultant information is 
orthogonal and thus can be used by the location center to provide enhanced location estimates. 
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If appropriate, a variation of the above process includes a location center initiated forced hard hand-off of the mobile 
station from a primary base station, e.g., 122b associated with CMRS-A, to a new primary base station associated with CMRS-B, e.g., 
I22d. A forced hand-off will further provide improvements in reducing systemic timing errors which may be inherent among base 
stations owned by different CMKS. After the appropriate signal measurements have been reported the location system 142 can t 
5 revert the hand-off back to the original CMRS. Other location system components shown in fig. 3 include a controller 14 location 
applications programming interface 136 (L-API-MSC) for communications interface with multiple CMKS mobile switching centers, 
via physical interfaces 176a and 176b. 

In order to provide the most economically efficient and accurate wireless location service capabilities among multiple 
CMRS providers in a shared coverage area, a common location appfeation? programming interface (L-AP1) is highly desirable. A 

1 0 common interface abo supports the natural competitive behaviors pmong wireless consumers and CMRS by providing flexible 

relationships among consumers who may want to switch service providers, yet. retain consistent wireless location services for public 
safety. This approach minimizes the L-API design and deployment costs among infrastructure vendors and location service 
providers in a shared coverage area. Based on a L-API between a wireless location center and the mobile switch centers of multiple 
CHRS, a novel aspect of this invention further includes a method and process that provides account management clearing house and 

IS revenue settlement capability with appropriate security management controls., This capability is implemented as wjre!?ss location 
control, accounting and security mediation agent functions jo cprnp?nsate C?tRS, providers for providing various location-specific 

, network services as described herein. - ., ,\ .,,». b . "^pr* - 

As wireless iocatioo requesuare sent to the location cemerior^ given,CHRSr,operated by a wireless location service 
provider ( WLSP), this agent: I .) assesses the appropriateness of soliciting additional signal and control measurements from another 

20 CMRS* base station in the same coverage area, in order to improve the q ualtty of the, locaiipn estimate, 2.) Accesses, requests and 
receives signal and control information with another fMRS base, station infrastructure, 3.) proyides.as appropriate a record of 
compensation entitlement between or among multiple. CRMS and WLSPs, and 4^security management controls that protect the 
privacy needs of wireless customers and the unauthorized sharing of information between or among CMRS. Security controls also 
include audit trails and controls regarding customer access of their location subscriber profile and the administration of network 

25 security processes and related base station parameters and inventory. 

Referring to Fig. S, Location Center-base station access, multiple CMRS, an alternative embodiment is provided to 
extract the wireless location signal measurement data from each base station associated with each of multiple CMRS. Given base 
station 1 22 i and I22j are operated by CMRS-A and base station 122k and 122m are operated by CMRS-B, a communication circuit 
provides connectivity with the location application programming interface - base station (L-API-BS) 1 09. The L-APt-BS I Q9 is in 

30 communication with controller 14 in the location center 142. The communications circuit can be any of several conventional 

transport facilities, such as a private line circuit, a DS-I or T-l carrier circuit, frame relay circuit, microwave circuit, or other data 
communications circuit. 

The advantage of this embodiment is that no modifications are required by the infrastructure vendor in terms of the 
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embedded operations circuit, and related funaions and systems which otherwise would be needed to telemeter wireless location 
signal measurement data from the base station to the location center 142. The termination equipment (not shown) in 
communication with the transport facilities, within each base station typically includes a small computer with an in-circuit 
connection, such as an ASIC clip-bn device, with conneaions to the control processor circuitry with the base station in the receiver 
5 section. The small computer provides a conversion of the signals provided on the in-circuit connection to the ASIC chip, for 
serialization and transmission to the location center via the transport facilities. 

HOME BASE STATION DESCRIPTION 

The Home Base station (HBS) concept in the PCS wireless network environment allows a user's mobile station to be also 
10 used as a low cost cordless phone, whenever the' mobile itatioh is physically near (generally within 700-1,000 feet) of a Home Base 
station Device (HBSD). This enables the user to avoid the typidlly higher cost air time charges associated with traditional wireless 
service.' • ; ? •■ : 'v - : - ' 1 ■ :*!..■:* 

The HBSD is similar td ordinaryxordiess phone traiisceiver devices in current use today, but is modified to function with 
a PCS wireless mobile station. Althbugh tlie HBSD Has ten ^pically used at a residential consumer's home, the HBSD couid also be 
IS used in business settings and other environments. - ■ • ' ' v 

When a mobile station (MS)' is hear the HBSD as shoWn ih Fig. 17; and the HBSD ctetefcts the presence of a mobile 
station over the Cordless phone air interface, the HBSD signals the Home Location Register (HLR) software in the Service Control 
Point in the AIN network associated wWtife mobile station and mobile station's home mobile switch center. The home location 
register redirectsmobite statWn terminating calls from the network away form the mobile station* 'mobile identification number in 
20 ■■ the mobile switch center, 'aM fothe'AIM/SSP wirtffine^ wireline number associated with the HBSD. 

Similarly, 1 th^ afrtempC^ire^i the mobile station signal from a PCS 

network fixed base station, to the control of the HBSO/the HBSD redirects trie mobile station originating call through the wireline 
network, similar to any other wireline network all. v ' ^ . 

A reverse scenario occurs whenever the mobile station and HBSD lose communication: the mobile station registers in a 
25 wireless PCS network fixed base station, causing redirection of calls to the wireless network. The cordless phone iir interface may 
be of a vendor proprietary design, or it may be a similar design as the CDMA air interface. 1 

In order to perform a location estimate in the HBS concept, a connection is used between the Location Center (LC) and 
the home location register/HBS application in the SCP. In addition, a new process, termed a Location Notification Process (LNP) 
within the home location register/SCP is used to send a message to the LC autonomously whenever a state change occurs in the 
30 - mobile station 1 (either via a specific list of mobile identification numbers or all mobile identification numbers) registration: 
registering either to a fixed Base station in the Wireless PCS network or to a HBSD. 

Alternatively the process may respond to an on-demand message from the LC to the LNP within the home location 
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register/HBS application: Irierihcrcase 2 response imssage (ram -the-LNP to the LC provides the information regarding whether or 
not a mobile station is within range of its, or a aesigsiated HBSD. in either case the response message contains a message header 
information which provides the Jignat processing subsystem 20 (eqiiivalently this may be known by signal filtering subsystem) 
with the ability to determine and distribute the information to the HBS first Order Location Estimate Model. 

LOCATION USING DISTRIBUTED ANTENNAS DESCRIPTION 

CDMA distributed antennas are useful particularly in system.configurations involving microcells, and potentially indoor 
environments, such as COMA PBX (private branch exchange) systems in business offices, and in wireless local loop applications. 
From a mobile station location perspective, the distributed antenna configuration can provide significant improvements in location 

1 0 error, as compared with an indoor mobile station user with a wireless connection.to an outdoor, macrocell Base station. Wireless 
location can be achieved provided certain methods and procedures (M£Ps) are followed during the installation process. Data 
related to these MSPs is then used by various location processes discussed elsewherejn this invention. 

First, a general description of CDMA distributed antennas is presented, followed by tfie M&Ps necessary to support 
wireless location. . . l t . . , 

IS ; In the CDMA distributed antenna concept, a set of simple antennas, placed apart in a.gjyen area, similarly to any other 
cell placement arrangement for coverage objectives, are fed by a common radio signal. Antennas are usually, placed $uch that their 
coverage patterns are substantially or completely overlapped in area of coverage, from a wireless location perspective, completely 
overlapping coverage is preferred (this approach also imprpves perceived signal quajityjjy the end user*)., . v ^ 

The importance of understanding and characterizing the aggregate system delay elements is.shown in fig, 6: Distributed 

20 Antenna Delay Charatterization. For any given Pilot Channel pff set I" , ^dduipnai delay is irarodwed tjy the microwave 

propagation channel (Point A) and any internal repeat^r/arpplif ier ; equipmeiit (Point ft),. Each of four delay elernents i; through t 4 
introduce further delay. A mobile station detecting all four DA antennas' delayed signals would determine various sets of 
cumulative system propagation delays. Since each delay is essentially fixed in a location, such information can be used to determine 
the mobile station location within the building. Fig. 7 illustrates the effective system timing among the delay elements 324, relative 

25 to the GPA system time 336, along each point in the diagram shown in Fig. 6. 

Fig. 9: One Exemplary DA Configuration, illustrates a typical configuration where the CDMA base, station antenna is also 
directed connected to three delay elements and antenna radiators. 

The CDMA Base station transmitter common output signal is fed through 1 distribution coaxial cable system, optical 
fibers or other means, to a string of two or more antennas. Each antenna is connected to the distribution cable via a transmission 

30 line tap or delay element, which may or may not provide further broadband gain. The transmission system normally consists of two 
media channels, one (or transmit and one for receive signals. Fig. 10 illustrates an Alternative DA Configuration, using multi-point 
microwave antennas connected to individual delay elements and their respective radiating antennas. 
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Fig. 1 1: Serving Dense Multi-level buifdingsvia^iriualPilots, illustrates a typical application where a multi-level 
m ■ building is served by two base^ stations.with, pijqt ; qf f^eu ;Y)w\$^?Moflm Tj serves floor X and pilot offset "f serves floor 
Y. As shown, a microwave link, either active or ; passiyei relays^heJ^se station signals between.the distributed antennas within the 
building to the base stations. . v. •,: 5 \ :> 

S The main concept is to introduce purposeful delay and multipath signals with sufficient delay spread for signal 

discrimination. Each antenna radiates a signal which is substantially delayed with respect to any other antenna in the area. If two 
or more paths are available for the mobile station receivers with greater than one eighth microsecond differential path delay (or 
whatever resolution is available in the CDMA mobile station receivers), then two or more PN receivers in the same mobile station 
can be employed to separately receive and combine these signals and thus achieve processing 'gains through path dive rsity. 
10 Antennas may be omni-directional or directional. " ; 

- Delay elements may be simple delay lines such as lengths of coaxial cabling, or other active or passive delay elements, 
such that the combination of components provides the needed delay. The transmission line between the CDMA Base station/PBX and 
the distributed antennas may be via a pair of dedicated, beam-focused high gain antennas, and/or a repeater system. Provided 
sufficient delay exists between the multipath signals 4 from separate distributed antennas exists, each Data Receiver within the 
IS mobile station tracks the timing of the received signal it is receiving. This is accomplished by the technique of correlating the 
received signal by a slightly earlier reference PN aid 5 correlating the received signal with a slightly late local reference PN. further 
distributed antenna details can be seen from Githiusen, et'al, patent number 5,280,472, assigned to Qualcomm, Inc. : 

' ! { The total measuretl delay of both forward and reverse link signals between tfie BS and the mobile station are thus 
determined naturally by the CDMA radio receiver designs as a part ol the muliipath' tracking process, and can be made available to 
20 a location entity for ^rformihg location estiinaterof the mbbiTe station. ' " 

However/the measurements of de^iy between a particular distributed antenna and'the mobile station will include the 
' ' aggregate delay components of several fnecharihrnsrbeyo^d the BS pilot PN offset delay/in the case of distributed antenna 
configurations; the simple TOA or TDOA model which is based solely of the speed of light, must now be adjusted 10 account for the 
purposefully introduced delay. 

25 The mobile station measures the arrival time T, for each pilot /reported to the BS. The pilot arrival time is the time of 

occurrence, as measured at the mobile station antenna' connection, of the earliest arriving usable multipath of the pilot. The arrival 
time is measured relative to the mobile station* time reference in units of PN chips. The mobile station computes the reported pilot 
PN phase f;as: ' 
f i= (T; + 64 xPILOTJN) mod 2 IS , 
30 where PILOT_PN is the PN sequence offset of the pilot. 

Reference fig. 6, which illustrates a typical distributed antenna configuration consisting of a repeater/amplifier and 
four distributed antennas. The total system delay, T ; is: 

I = U« + T 0 + T R + T, + Tj + T 3 + T 4 
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During the installation phase of tlrhigh gafiSantenha (if required), repeater (if required) and the distributed 
antennas, if the system delay is measured at each distributed anieVha and the value! stored in a location database, including each 
antenna identification, and exact physical iocatWii (in three dimertsioni^tteri during a location request, all fixed delays will be 
known, thus the TP value can be determined by subtracting the fixed,'known oeiay values from Ti, the' measured time of arrival. 
5 The TP value can now be used to determine a TOA and or a TDOA value in a manner similar fo the non-distributed antenna case, 
thus location can be determined based on these TOA/TDQA ranging values. 

The required installation methods and procedures required to suppon wireless location are illustrated in Fig. 8: 
Methods and Procedures for OA Installation. By following these methods/the Location Center (LC) will contain a database 
populated with the necessary data values to perform accurate location estimates within the building containing the distributed 
10 antennas. Fig.DA-IO: Exemplary DAiocation Database, illustrates typically data element types and values required in the DA 
location estimate model database. Fig. DA-I I illustrates howa simpleTOA location estimate model can be used to determine 
wireless location in a DA environment. Based on the knowsi geometry and coverage areas ol each DA cell, and the percentage of 
• maximum radius, determined by the above classification, it is possible to construe: radius-radius circles of the DA cells. The 
■ interseaion of the three circles (in this caxe) ; j[rrovides the location estimate. w- v. , - », 
IS In order forthe TOA and TDOA location calcu!ationvto be determined, it js:a necessary condition that during 

distributed antenna installation, the minimum values of the Delay E!ements,be set to each exceed the maximum practical (i.e„ 
within the coverage ar^sa) TP values be a! least J/2 of a rM. c^ip durrdiqn (about 500 nanoseconds), to easily allow for the CDMA 

Data Receives to ^able . to correto Fig. 12: DA Delay Spread Ranges, 

, illustrates typical maximum ranging variable delay values (e.g„ up to 1 ,960, feet) jf 500 nanosecond guard zones (t) are used. If 
.20 larger ranging values ai? : required, then guard zone delays must be increased proportionally, ... .. 

Fig. 13: DA Cell Layptit and (^ornetiy >: illustrates, fprDA omnicel! sizes with a radius of about 2,000 feet and guard 
zones of 500 nanoseconds, that the minimum required cumulative delay.yalues for the delay elernenu are: u f 2.46 
microseconds, t 3 = 4.92 mS, and t 4 = 738 mS, respectively. 

it should also be noted that a maximum upper bound exists for the maximum amount of cumulative system 
25 propagation delay which can be tolerated by the CDMA mobile station. The total delay cannot exceed an amount that would 

interfere with the next pilot PN offset, or substantially delay the scanning time of the search receiver in the mobile station. In any 
case, 30 to 40 microseconds of total delay is acceptable, and would allow for a relatively large. n umbe r of distributed antenna 
components to be included, thus no unusual impacts are required of the system to accommodate location methods. 

By purposefully introducing a relatively large amount of delay in the distributed antenna delay elements, relative to the 
30 maximum permissible TP delay values, it is possible to utilize the large Delay Element values to uniquely identify the distributed 
antenna ID, and thus via the distributed antenna database, to determine the antennas' exact location. Knowing the antenna's 
location and TP value (last stage of propagation delay), TOA and TDOA ranging can be achieved, and thus mobile station location 
within a distributed antenna configuration, can be determined. 
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Fig. 14: Aaual tleasure^ents.apd Cla^itotion f ill^vrates how CDMA delay spread measurements are used in a DA 
. . configuration to form a relationship^ the OA locations. Although the CDMA air 

;; . .interface standard only requires-the signal strength and.tiffte of^ival of thefirst useable delay spread signal to be reported from 
. v . ( . the mobile station to the B5, assume hert that the mobile station has the capability to provide the BS, and consequently the LC, 
• :r _s;; ( 5 with a list of a|i peak values of CgHA fingers^; 

Assume that the mobile station detects and telemeters three CDMA finger RF measurements, as shown in the table below, 
v New Message Type Data Structure Content w : : .v: i.-c ■ 



Signal Strength . < 


Delay Time of Arrival 


— 77-dBm v. 


•> ■ 1.68 microseconds 




' 3.98 ; : • ; " v - 


- . • ^95 • • ' ■ -■ ■ ■ ■■■■■ ' 


9.16' 



V iTable: New MfcssageType Data StruaureContent. 



Mote that the. measurements may be averaged over a'sampfe space of 128 individual measurements. Referring now back 
10 to fig. 14, it can be seen that the first finger h associated wittHlieiDAcHM; rangeO to 1.96 microseconds, and DA cell-2, range 
2:4$ micrbsecomtHo 4^^^ locations, 
corrtlation's can% derived and 1 established to rtlateiai^al idaiureniielhts wrtti locations. Any one of several location estimate 
' modules may bewedvas slloWh in7i^DAW2^toriti6rilsfimate wirig trie radius-radius rnfthod; or multiple invocations of 
1 1 ' different modules may ^afte/iiativefy 1 bis used to form a IdcrfriMi estimate' of trie mobi fe itkion within the e nviro nment . 
' IS *■" 11 It is now possible 

since each DA cell delay range is f know; and iiirticieht gtiard'Tohes 1 exist fetWeeri' delay 'spread ranges to unambiguously classify the 
- measurements, and thus to d^termirreniDfiife station Id^a tl 6 n : T he ^ d I low if n g t-k bl e i 1 1 us t ra t e s a typical database containing the 
dassifiatiohMunw 



DA Cell ID 


Location (X, Y) in 


DA Cell Radius 


Low Range ( 1 


High Range (In 




feet). 




microseconds) 


microseconds) 


1 


m 


1.96 


0 


1.96 


2 


(•20,3000) 


1.96 


2.46 


4.4? 


3 


(4000,2800) 


1.96 


4.92 


6.88 


4 


(1600,2800) 


1.96 


738 


934 



20 Table: New Message Type Data Structure Content 

Translating the aaual delay measurements into a percentage of the maximum radius of each cell (i.e., cell I radius 
aaual is 88 %, cell 2 radius aaual is 78 %, and cell radius 4 aaual is 91%) provides wireless location using familiar radius-radius 
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calculations. _ ., , 

Depending upon the combinations of emtadirnents, the Location Center and.Gateway may contain from one to three 
interfaces into the digital PCS network, shown as interfaces ,.XJ, and ,Z, in fig. 24 v Location and CTIA/TR45 Network Reference 
Model. Network interface reference points Urn, A, Ai, B, C, D and H are part of the Cellular Telecommunications Industry of America 
(CTIA)/IechnicaI Reference 45 standards, and are not discussed further. 

Network interface reference point X provides a direa connection to the mobile switch center, used for transferring Rf 
measurement signals from the mobile station and BS to thtlC add for transferring location control between the LS and mobile 
station, and between the LC anil BS. This interface can be implemented via any number of data communications circuit 
configurations and protocols in current use, such as a T-carrier data circuit, with DSU/CSUs at each end, using an intranet/internet 
protocol suite, such as TCP/IP, RPC messaging, or other middleware solutions, such as Pipes, IBM MO series, world wide' web 
protocols, such as JAVA/VRML scripts, hypertext markup language (HTML) links, and may also include various firewall schemes and 
data encryption mechanisms, etc, in order to communicate asynchronous messaging among the endpoints, and in particular, in 
reference to the final distribution of the locaiion infaVmation to the desired user. f • : " 

' Network interface reference point Y is used in the embodtment wherein a public switched telephone ner^ork interface is 
required or desired. This interface is a straightforward method to support location applications wherein, for example, a mobile 
station user dials a telephone number in order to initiate a location request, and could also be used to telemeter RF measurement 
and location control messages between the LC and the mobile siatiGn/BS. Alternatively a timer-initiated process internal to the LC 
may be used to start a location request, or via any number bf events external to the network. Point Y also has the advantage of not 
requiring a direct connection to a commercial radio mobile service providers* network elements, thus affording a convenient 
interface for use by third party location service providers unrelated to the commercial radio mobile iervfee provider. 

NATIONAL SCALE WIRELESS LOCATION 

By utilizing specific data items used in the Home Location Register in the Advanced Intelligent Network, it is possible to 
determine the mobile station location on a national scale, i.e. ( location within the context of a state, and in which city. 

Network interface reference point Z is used in the embodiment wherein a gross location must be determined. A gross 
location is defined as an area associated with a particular mobile switch center coverage area. Mobile switch center coverage areas 
are typically bounded by a large metropolitan area, such as a city. The Home Location Register (HLR) contains gross location 
information. The 2 interface allows the LC to query the home location register to determine if the user is in their "home area, or 
whether the user is marring to another mobile switch center coverage area, such as another cky. Ml Cellular Radio 
Telecommunications intersystem operations communications protocols provide mechanisms that allow a user to roam into 
authorized areas outside of their "home" area. 

If the user is roaming in another area, then the LC can use that information to initiate location control messages toward 
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the COHA network currently hosting the mobile station user. fig. 25 illustrates how a user based in Los Angeles, CA. for example, 
' may roam to a CDMA system New York City, and be "located'' within that metropolitan area, through a data communications 
network and a national Location Center Clearinghouse system: ' ; ' ' ! ;J ' 1 ' ' ' 

5 SIGNAL PROCESSOR SUBSYSTEM 

The signal processing subsystem receives control messages and signal measurements and transmits appropriate control 
messages to the wireless network via the location applications programming interface referenced earirer, Jor wireless location 
purposes. The signal processing subsystem additionally, provides various signal identification, conditioning and pre-processing 
functions, including buffering, signal type classification, signal, filtering, message control and routing functions to the location 
JO estimate modules. . . , t v. it. a .cr^-n v v' 

. .. There can be several combinations of Delay Spread/Signal Strength setsof measurements made. available to the signal 

processing subsystem 20 within the LocationXenterAystem 42, shown in Fig, 3. In sqme cases the mobile station 140 may be able 
. todetea up to three or four Pilot Channels representing three to four Base Stations, or as few as one Pilot Channel, depending upon 
. the environment, Siniilariy, possibly more than one &S 122 can detea a mobile sunon l4Q t transmitter signal, as evidenced by the 
,15 , . provision of cell diversity or soft hand-of/ in the CDMA standards, apd the fact thar muluple CMRS' base station equipment 

commqnly wi!| oyerJap.cover^ge ate^V For eaclv pio^ile -siatiqn 440 ; prBS l&tr^mitted sig;naldetected : by a receivergroup at a ■ 
. station,, multiple delayed signals, or "fingers'-may be deteaed.apdttf.^ radio, propagation, conditions, 

, from a given transmitter : . , ; , t •*■ ■■■■ w,?u . .w;^'v:^ * ■•■ • .* .v 

In typical spread specuum diversity CDM^r^eiver design^; the "first" finger represents. the most direct, or least delayed 
20 mukipath signal. Second or possibly third or fourth fingers may also be detected and tracked, assuming the mobile station contains 
a sufficient number of data receivers. Although traditional TOA and TDOA methods would discard subsequent fingers related to the 
same transmitted finger, collection and use of these additional values can prove useful to reduce location ambiguity, and are thus 
collected by the Signal Processing subsystem in the Location Center 142. 

For each pilot channel detection case, multiple fingers (up to three or four) may be detected and thus reported to the 
25 Location 5 system, as shown in Fig. 22 and 23, for dense urban and rural settings, respectively. From the mobile receiver's 

perspective, a number of combinations of measurements could be made available to the Location Center. Table SP-I illustrates the 
available combinations for three and four receiver cases, respectively. 



No. of 


No. ofBSs 


No. of 


No. of 


No. of 


No. of 


No. of 


Receivers 


detected 


Fingers 


Fingers, BS 1- 


Fingers, BS 


Fingers, BS 


Fingers, 4-S 






Detected 


S (first 


2-S (second 


3-5 (third 


(fourth 








strongest) 


strongest) 


strongest) 


Strongest 


3 . 


1 


1 


1 


0 


0 


0 


3 


1 


2 


2 


0 


0 


0 
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Table SP-I: Nominal CDMA Location Measurement Combinations 



The above Table SP- 1 scenario assumes that the mobile nation design and data collection structure only permits a lit 
correspondence to exist between the number of base stations detected and the number of data receivers 'reporting muitipath CDMA 

S fingers. '' * /'^'^ V...' 

Table SP-I illustrates the potential combinations of detected I CDMA signals representing muitipath fingers and total 
number of detectable base station pilot signals in a given location within the radio coverage area 120. Due to the disperse and 
near-random nature of CDMA radio signals and. propagation characteristics, traditional TOA/TDQA location methods have failed in 
the past, because the number of signals received in different locations area different, in a particularly small urban area, say less 

10 than 500 square feet, the number of RF signals and there muitipath components may vary by over 1 00 percent. 

The following diagrams illustrate a certain case from a location measurement perspective, of signals received for a three 
-data receiver and a four-data receiver configuration, in a nominal three sector honeycomb base station configuration. In f ig. 1 8, a 
mobile station at location "A" detects base stations lb, 5c, and 4a. However although a triad of signals are received, if varying 
muitipath signals are received from one or more base stations, then ambiguity can still result. Fig. 1 9 illustrates a mobile station 

15 located at position *T, detecting base stations I b, 5c, 4a, and 2C Although additional information is made available in this second 
case, traditional hyperbolic combinations taken three at a time, yield multiple location estimates. In certain cases the limit of the 
back-side of a "far-away"sectored antenna an be used to determine the limit of RF coverage in another base station sector area. 
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10 



Fig. 20 shows that normally a delay spreatTin y^tj^mWif^ztd^i of a'I20'degree solid angle. However by using the 
known fact that base station sector 2a con&im'a' SpveVage limit. suiMegative logic can be used to further restrict the apparent 
coverage area in seaor lb, from, 120 degrees to approximately 90 degrees as shown in the illustration, in order to locate the mobile 
station 6. Such information regarding seaor 2a can be determined by collecting the remaining set information from mobile station 
B. 

Now consider more practical, less ideal cases. Due to the targe capital outlay costs associated with providing three or 
more overlapping base station coverage signals in every possible location, most practical digital PCS deployments result in fewer 
than three base station pilot channels being reportable in the majority of location areas, thus resulting in a larger, more amorphous 
location estimate. Fig. 20 and 21 illustrate a typical relative error space wherein a mobile station detects only two base station pilot 
channels, and only one pilot channel, respectively. This consequence requires a family of location estimate location modules, each 
firing whenever suitable data has been presented to a model, thus providing a Ideation estimate to a backend subsystem which 
resolves ambiguities. 



15 



Base Station Cell site planning tools which utilize antenna gain radiation patterns, environmental clutter, such as 
buildings/dense forests, terrain heights, etc., can provide reasonable training data to bootstrap the initial operation of the It. 

An example of the types of data typically collected during field tests/runs is shown irr the following database table SP-2 
-below: — — — : ; — • - 



Column t 


Mobile Data Test Scit: Data Type Logged 


Position 




1 


CDMA Time (absolute, from GPS) 


2 


Vehicle Speed (in mph) 


3 


Vehicle Latitude (in deg. North) 


4 


Vehicle Longitude (in deg. East) 


5 


GPS Source (binary, e.g., GPS or Dead Reckoning) 


6 


GPS Data available indicator (binary states) 


7 


First BS-Mobile Received Power (in dBm, 1 second averages) 


8 


Mobile transmit Gain Adjust (in dBm, 1 second average) 


9 


first BS Mobile to Pilot (dB, 1 second average) 


10 


First BS Mobile received Frame Counts (integers per measurement period) 


11 


Mobile Finger's Average Time Separation (in nano/microseconds) 


12 


Mobile Fingers' Maximum Time Separation (in nano/microseconds) 


13 


Mobile Fingers' Number of Pilots locked (per 1 second average) 
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Column 


Mobile Data Test Set: Data Type Logged 


Position 




14 


Mobife finger Lock Counts 


15 


First BS Received frame Counts 


16 


first BS Eb/No set Point (in dB, 1 second average) 


17 


first BS cell Rx Eb/No per antenna (in dB, 1 second average) 


16 


Hand-off State (relative to the first, or connected-to BS) 


19 


first BS Traffic Channel Gain 


20 


first BS Power Control Subchannel Gain 


. 2| 


first 8S Reverse Link full frame Error Rate, over 500 frames' 


• 22 


forward Link full frame Error Rate, over 500 frames ' ^ 


23 


; first BS Pilot Channel Deilay Spread (iri nanbsetonds) ' " " : 


, . 24 : 


Seccmd BS-Ranked Pilot Delay Spread (irr nanoseconds) 


■25. ■ 


Second BS~Ranked Pilot.Relative Signal Strength (tn dB) ! . ; ■ 


26 ;; 


.: Third BS-Ranked Pilot Delay Spread 


, 27 , 


Third BS-Ranked Pilot Relative Sigra! Strength ^ 


28. . 


. r >t , Mobile Antenna Identification (in the case of a multi-sectored antenna) , . .. ,. 




Vehicle compass orientation (bearing orjbeading) ; , . . ;: 


30 


Mobile Station Power Class (an integer, 0-7,. indicating max. power, capabilities of the mobile station 
transmitter) . . } . _ . . k 



Table SP-2: Typical CDMA Field Test Measurements : , ...... c . 



Although the forward Jink mobile station's received relative signal strength (RRSS es ) of detected nearby base station 
5 transmitter signals can be used directly by the location estimate modules, the base station's reverse link received relative signal 
strength (RRSS ns ) of the detected mobile station transmitter signal must be modified prior to location estimate model use, since the 
mobile station transmitter power level changes nearly continuously, and would thus render relative signal strength useless for 
location purposes. 

One adjustment variable and one factor value are required by the signal processing subsystem: I.) instantaneous 
10 relative power level in dBm (IRPL) of the mobile station transmitter, and 2.) the mobile station Power Class. By adding the IRPL to 
the RRSS m , a synthetic relative signal strength (SRSS MS ) of the mobile station 140 signal detected at the BS 122 is derived, which 
can be used by location estimate model analysis, as shown below; 
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sRss m = RRss M + iRpL f .7; ^zzfi^fcivr:! * - 

SRSS MS a corrected indication of the effaaivfi.patb.loujn tte.reverse direaion (mobile station to BS), is now comparable 
. . with RRSS K and can be used to provide a correlation with either distance or shadow fading because it now accounts for the change 
. 5 of the mobile station transmitter's power level. The two signals RRSS 9S and SRSS MS can now be processed in a variety of ways to 
achieve a more robust correlation with distance or shadow fading. 

Although Rayteigh fading appears as a generally random noise generator; essentially destroying the correlation value of 
either RRSS 8S or SRS5 MS measurements with distance individually/several mathematical operations or signal processing functions 
can be performed on each measurement to derive a more robust relative signal strength value, overcoming the adverse Rayleigh 
10 fading effects. Examples include averaging, taking the strongest value and weighting the strongest value with a greater coefficient 
than the weaker value, then averaging the results. This signal processing technique takes advantage of trie fact that although a 
Rayleigh fade may often exist in either the forward dr r reverse path, it Ji riiucji less probable that a Rayleigh fade also exists in the 
reverse or forward path, respectively. A shadow fadejiowever.'simtt 

At this point a CDMA radio signal direction-independent "net relative signal strength measurement" is derived which is 
15 used to establish a correlation with either distance or shadow fading, or both. Although the ambiguity of either shadow fading or 
distance cannot be determined, other means tan be used id conjunction, such as the fingers of the CDMA delay spread 
measurement, and any other TOA/f DOA calculations from othfr geographical points. In the case of a mobile station with a certain 
amount of shadow fading between its BS 122 ^Fig/I), the'iRrst finger of a CMA delay spread signal is most likely to be a relatively 
shorter duration than the case Where the mobile station 140 and BS 122 are separated by a greater distance, since shadow fading 
20 does not materially affect the arrival time delay of the radio signal. ^ 

By performing a small modification in the control electronics of the CDMA base station and mobile station receiver 
circuitry, it is possible to provide the signal prdft ssiW^ iubsystcm 20 (reference fig. I) Within the Location system 42 (Fig. 1) with 
data that exceed the one-to-one CDMA delay-spread fingers to data receiver correspondence. Such additional information, in the 
form of additional CDMA fingers (additional multipart) arid all associated detectable pilot channels, provides new information 
25 which is used to enhance to accuracy of the Location Center's location estimate location estimate modules. 

This enhanced capability is provided via a control message, sent from the Location system 42 to the mobile switch 
center 12, and then to the base staition(s) 122 (Fig. 2) in communication with, or in close proximity with, mobile stations 1 140 to be 
located. Two types of location measurement request control messages are needed: one to instruct a target mobile station 140 (i.e., 
the mobile station to be located) to telemeter its BS pilot channel measurements back to the primary BS 122 and from there to the 
30 mobile switch center 112 and then to the location system 42. The second control message is sent from the location system 42 to the 
mobile switch center 112, then to first the primary BS 122, instructing the primary BS* searcher receiver to output (i.e., return to 
the initiating request message source) the detected target mobile station 140 transmitter CDMA pilot channel offset signal and their 
corresponding delay spread finger (peak) values and related relative signal strengths. 
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The control messages are implemented in standard mobile station 140 and BS 122 CDMA receivers such that all data 
results from the search receiver and multiplexed results fronhhe associated data receivers are available for transmission back to 
the Location Center 142. Appropriate value ranges are required regarding mobile station 1 40 parameters T_ADD (( I_DROP,, and 
the ranges and values for the Active, Neighboring and Remaining Pilot sets registers, held within the mobile station 140 memory, 
5 Further mobile station 140 receiver details have been discussed above. 

In the normal case without any specific multiplexing means to provide location measurements, exactly how many CDMA 
pilot channels and delay spread fingers can or should be measured vary according to the number of data receivers contained in 
each mobile station 140. 

As a guide, it is preferred that whenever RF characteristics permit, at. least three pilot channels and the strongest first 
10 three fingers, are collected and processed. 

from the BS 122 perspective, it is preferred that the strongest first four CDMA delay spread fingers and the mobile 
station power level be collected and sent to the location system 42, for each of preferably three BSs 122 which can detect the mobile 
station 140. 

Table SP-3 illustrates the resulting extended combinations of BS signals (pilot channels) and finger measurements 
IS potentially available, based on the above preferred conditions. The philosophy js to collect as much reasonable data as is practical, 
given the constraints of CDMA receive^ search times, receiver memory storage and available CPU and data transmission 
bandwidth, in order that sufficient orthogonal information can be processed to minimize location estimate error..; 
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'Table SP-3: Extended CDMA Location Measurement Combinations 



As can be seen from the table, a much larger combination of measurements is potentially feasible using the extended 
data collection capability of the CDMA receivers. In the case of the last row shown, additional combinations are also possible using a 
similar scheme of allocating the number of CDMA fingers detected at the first or strongest BS, followed by the second strongest base 
station, then the third strongest base station, etc 

Fig. 29 illustrates the components of the Signal Processing Subsystem 20. The main components consist of the input 
queue(s) 7 ( signal classifier/filter 9, digital signaling processor 17, imaging filters 19, output queue(s) 2l, router/distributor 23, a 
signkl processor database 26 and a iignal processirig controller is! 

Inpiit queues 7 are required'fn order to stige the rapid acceptance of a significant amount of RF signal measurement 
data, used for either location estimate purposes or to accept autonomous location data. Each location request using fixed base 
stations may, in one embodiment, contain from I to 128 radio frequen^. measurements fro mobile station, which translates 
to approximately 61.44 kilobytes of signal measurement data to be collected within !0 seconds and 126 measurements from each of 
possibly four base stations, or 245.76 kilobytes for all base stations, for a total of approximately. 640 signal measurements from the 
five sources, or 307 2 kilobytes to arrive per mobile station location request in 1 0 seconds. An input queue storage space is assigned 
at the moment a location request begins, in order to establish a formatted data structure in persistent store. Depending upon the 
urgency of the time required to render a location estimate, fewer or more signal measurement samples can be taken and stored in 
the input queue(s) 7 accordingly. 

The signal processing subsystem 20 supports a variety of wireless network signaling measurement capabilities by 
detecting the capabilities of the mobile and base station through messaging structures provided bt the location application 
programming interface 14 in Fig. I. Detection is accomplished in the signal classifier 9 (Fig. 29) by referencing a mobile station 
database table within the signal processor database 26, which provides, given a mobile station identification number, mobile 
station revision code, other mobile station charactersitics. Similarly, a mobile switch center table 31 provides KSC characteristics 
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and identifications to the.signaklas«Tie//firt^^^ message header information that 

- further classifies the measurement data which allows the digital signal processorand, image filter components to selea the proper 

internal processing subcomponehu to perlbf hi dperafio'nslrTthi signal measurement data, for use by the location estimate 
modules. 

5 _ . , Regarding service control point messages autonomously received from the input queue 7, the signal classifier/filter 9 

detemines via a signal processing database 26 query that the message is to be associated with a home base station module. Thus 
appropriate header information is added to the message, thus enabling the message to pass through the digital signal processor 17 
unaffected to the output queu 21, and then to the router/distributor 23. The router/distributor 23 then routes the message to the 
HBS module 6 shown in Fig. I. Those skilled tn the art will understand that associating location requests from Home Base Station 

10 configurations require substantially less data: themobile identification numbered the associated wireline telephone number 
transmission from the home location register are on the order of less ^han 32.bytes. Cpnsequerttialljf the home base station message 
type could be routed without any digital signal processing. 

Output queue(s) 21 are required for similar reasons as input queues 7: relatively large amounts of data must be held in a 
specific format for further location processing by the location estimate modules. 

15 The router and distributor component 23 is responsible to directing specific signal measurement data types and 

structures to their appropriate modules. For example, the HBS module has no use for digital filtering structures, whereas the TDOA 
module would not be able to process an HBS response message. 

The controller 15 is responsible for staging the mpvemem of data among th? signal processing subsystem 20 components 
input queue 7, digital signal processor 17, router/distribptor .23 apd the output queue 21, and to initiate signal measurments within 

20 the wireless network, in response from an ii^rnet 6§ .te^^^TffiJ. 1 *^ PW 1 W f'S: ,'* ^ l *l e ^cation application programming 
interface 14. 

'■ In addition ttie controller 15 relceh^e^aiitommbus irmsiages fh>m the MSC\ via the ideation applications programming 
interface 14 (Fig. l) ! or L-API and the input/queue 7; whenever a 1 9-1 -i wirefess call is originated. The mobile switch center provides 
this autonomous notification to the locatidif system as follows: By specifiying the appropriate mobile switch center operations and 

25 maintenance commands to surveil calls based bh certain digits dialed such as 9- 1 - 1 , the location applications programming 

interface 14 (fig. I), in communications with the MSC 12a and 12b in f ig.l, receives an autonomous notification whenever a mobile 
station user dials 9-1-1. Specifically, a bi-direaionai authorized communications port is configured, usually at the operations and 
maintenance subsystem of the MSC 12a and 12b in Fig. I, or with their associated network element manager system(s) t with a data 
circuit, such as a DS-I, with the location applications programming interface 14 in Fig. I. Next, the "call trace" capability of the 

30 mobile switch center is activated for the respective communications port The exact implementation of the vendor- specific man- 
machine or Open Systems Interface (OSI) commarids(s) and their associated data structures generally vary among MSC vendors, 
however the trace function is generally available in various forms, and is required in order to comply with Federal Bureau of 



47 



SUBSTITUTE SHEET (RULE 26) 



BNSDOCID: <WO 9810538A1_I_> 



f 

10538 



WO 98/1038 PCT^J^!5933 

Investigation authorities (or wire tap purpose. A|te;.t^e appropriate suryeitence commands are established pp. the MSC, such 9-1-1 
call notifications messages containing the mobile station identification nyniber (MIN) and, in phase 1 E9-I -I . implementations, a 
pseudo-automatic number identication (a.La. pANI). which provides.3n association with the primary base station in which the 9-1- 
I caller is in communicaiton. In cases where the pANI is known from the onset, the signal processing subsystem avoids querying the 
5 MSC in question to determine the primary base station identification associated with the 9-1-1 mobile station caller. , 

After the signal processing controller i S receives the first message type, the autonomous notification message from the 
mobile switch center 1 12 to the location system 42, containing the mobile identification number and optionally the primary base 
station identification, the controller 1 5 queries the base station table 13 in the signal processor database 26 to determine the status 
and availability of any neighboring base stations, including those base stations of other CMRS in the area. The definition of 

1 0 neighboring base stations include not only those within a provisionable "hop" based on the cell design reuse factor, but also 
includes; in the case of CDMA, results from remaining set information autonomously queried to mobile stations, with results stored 
in the base station table. Remaining set information indicates that mobile stations can detect other base station (sector) pilot 
channels which may exceed the u hop" distance, yet are nevertheless candidate base stations (or sectors) for wireless location 
purposes Although cellular and digital cell design may vary, 1 "hop" distance is usually one or two celt coverage areas away Irom the 

1 5 primary base station's cell coverage area. 

j . / , ; Hiving determined a likefy set of bas? kitions which may both detect the, mobile station^ transmitter signal, as well as 
id determine the set of likely pilot channels (Le^ base statidns' and their associated physical antenna seaofsj'deteictable by the 
mobile station in the area sumiimding the primary base station (sector), the ccntroller 15 initiates messages to bcth the mobile 
station and appropriate base sutions (sectors) to perform signal measurements and to return the results of such measurements to 
20 the signal processing system regarding the mobile station to¥ located. This step may be accomplished Via several interface means. 
In a first case the controller IS utilizes, for a given MSC, predetermined storage information in the HSC tabte' ji to determine which 
type of commands, such as man-machine or OSIcommands are needed to request such signal measurements for a given MSC 12a 
or 12b in fig. 1. The controller generates the mobile and base station signal measurement commands appropriate for the MSC and 
passes the commands via the input queue 7 aria the locations application programming jnterface 14 in fig.l, to the appropriate MSC 
25 12a and I2b f using the authorised communications port mentioned earlier. In a second case the controller 15 communicates directly 
with base stations as discussed above and shown in Fig, 5, Location Center-base station access, multiple CMRS, in this second case 
an alternative embodiment is provided to directly extract the wireless location signal measurement data from each base station 
associated with each of multiple CMRS networks within having to interface directly with the MSC for signal measurement extraction. 

Upon receipt of the signal measurements, the signal classifier 9 examines location application programming interface- 
30 provided message header information from the source of the location measurement (for example, from a fixed BS 122, a mobile 
station 140, a distributed antenna system 168 or message location data related to a home base station), provided by the location 
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applications programming Wrfaa : (i:'llfl)''V&Wi^t qitulfa^^etermi not device filters 17 or image filters 

19 are needed, arid assesses a relative j>fto^ as an emergency Versus a background location task, in terms of 

grouping like data associated with a given Nation request! 1 n thV ii!ase whe re multiple signal measurement requests are 
outstanding for various base stations, some of which may be associated with a different CMRS network, and additional signal 
classifier function includes sorting and associating the appropriate incoming signal measurements together such that the digital 
signal processor 17 processes related measurements in order to build ensemble data sets. Such ensembles allow for a variety of 
functions such as averaging, outlier removal oyer a timeperiod, and related filtering functions, and further prevent association 
errors from occuring in location estimate processing. 

Another function of the signal classifier/low pass filter component 9 is to filter information that is not useable, or 
information that could introduce noise or the effect of noise in the location estimate modules. Consequently low pass matching 
filters are used to match the in-common signal processing components to the characteristics of the incoming signals, low pass 
filters match: Mobile Station, base station, CMRS and MSC characteristics, as wall as to classify Home Base Station messages. 

The signal processing subsystem 20 in fig. I contains a base station database table 13 (Fig. 29) which captures the 
maximum number of CDMA delay spread fingers for a given base station, containing information structures as shown in table SP-4 
below: 



Primary Base ' 
Station . ;I . 
Identification 


latitude, • 

M>ngitude, 

elevation 


Pilot Channel 
Offset 


Identifier, 
code 


Maximum No. of 
CpMA Fingers 


-DEN-001 "« ■ 


> : x*y,i • 


'.»■•• '5 ■ i ■ 


CODIMABC00I" " ' 


••'4 = 


OEN-002 


• ; p,q;r ■ 


25 


COeE»ABC002 >" r * 




iDEN-003^V-^ 


v •:^;t;fu^->- 




••CODEHABQ)03 ' . ' 


■ ■ ••••• 3' • 


DEN-004 1 






' CODEKABC004 ~ 


' 4' 


BLD-OOS 


<Uf 


.-■•«■ --45: 


CO8LDABGO0S : ' 















Table SP-4: Base Station Characteristics 



Th€ base station identification code, or ail or common language level identifjeation code is useful in identifying or 
20 relating a human-labeled name descriptor to the Base Station. Latitude, Longitude and elevation values are used by other 
subsystems in the location system for calibration and estimation purposes. As base stations and/or receiver characteristics are 
added, deleted, or changed with respect to the network used for location purposes, this database table must be modified to ref lea 
the current network configuration. 

Just as an upgraded base station may detect additional CDMA delay spread signals, newer or modified mobile stations 
25 may detect additional pilot channels or CDMA delay spread fingers. Additionally different makes and models oi mobile stations may 

49 



SUBSTITUTE SHEET (RULE 26) 



BNSDOCID: <WO 98t0538A1J_> 




WO 98/10538 PCT7VS97/15933 

acquire improved receiver senstttvitEes, suggesfsng^ ^ g^eajer coy^^S^^P 3 ^^!^ : ft? l*' 0 * establishes the relationships 
among various mobile station equipment suppliers and f cerain technical ; data relevant to this location invention. 

Although not strictly necessary, The MIN can.be popuiifted in this table from the PCS Service Provider's Customer Care 
system during subscriber activation and fulfillment, and could be changed at deactivation, or anytime the end-user changes mobile 
5 stations. Alternatively, since the MIN, manufacturer, model number, and software revision level information is available during a 
telephone call, this information could extracted during the call; and the remaining fields populated dynamically, based on 
manufacturer's' specifications information previously stored in the signal processing subsystem 20, Default value; are used in cases 
where the MIN is not found, or vr^^ ceruin information must be 



Mobile Station 

Identification 

(MIN) 


Manufact- 
urer 


Model 
No. 


Allowed , 
S/W 
Revision 
Levels 


Maximum 
No. of 
CDMA 
Fingers . 


Maxim 
um No. 
of 

Pilots 
Detecta 

ble 


, Transmit 
Power 
Class r 
(Max); 


Rec. , 

Thermal 

Noise 

Floor 

(dBm) 


3034561234567 


. Sony 


S 


RL0 


i f . . 


.1. 


2. . 


-114 


3034561234568 


Qualcomm 


25 .. 


R2.0I v 


A . ... , ; , 


A - , ; 


.,4. „.. 


-115 • 


3034561234569 


.Panasonic; ; n 


,20...,., 


M ' . ... * 


I..-,, . ;/ 


} .' iff- 


5,....,, 


-!I3 


303456I234S70 , 


Fujutshu M 


15. : 


-Mi.-,,:., 


,4 , ; 


,.,4 jt , 


0 , . .; ■. 


•116 


3034561234571 


Sony _ < 


45 


Rl.i , 


3-.-. - * 


. 3, . 


7 .. 


-115 


Default 


Default 


Default 


RL0 


3, 


3. ; . .. (jf , 


3,,, 


,112 



10 Table SR-5: Mobile:.SjU4&n,Ghri93c^^k^ Table \ ; \ 

A iow pass mobilfe station to; ^ contained whhi n 5he signaklassifier/low pass filter 9 of thr signal processing 
subsystem 20, uses the above table data to perforin the following f unctions: I) act as a low pass filter to adjust the nominal 
assumptions related to the maximum number of CDMA fingers, pilots detectable; and 2) to determine the transmit power class and 
15 the receiver thermal noise floor. Given the detected reverse path signal strength, the required value of SRSS MS a corrected 

indication of the effective path toss in the reverse direction (mobile station to BS), can be calculated based on the SP-5 table data 
contained within the mobile statbn table 1 1; in the ugnal processing 

The effects of the maximum Number of CDMA fingers allowed and the maximum number of pilot channels allowed 
essentially form a iow pass filter effect, wherein the least common denominator of characteristics are used to filter the incoming RF 
20 signal measurements such that a one for one matching occurs. The effect of the Transmit Power Class and Receive; Thermal Noise 
floor values is to normalize the characteristics of the incoming RF signals with respect to those RF signals used. 

Fig. 4, Location Provisioning from Multiple CMRSs, illustrates a system architecture to enable the customer care systems 
belonging to different CMRSs, either on an autonomous or periodic basis, to update a provisional signal processing database 26, 
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containing the mobile station cHaracteristi6,*in tfmiifiuhiafibn'Witti l ttie f ii^nal tta»ifier/filter 9, input queue 7, and the location 
applications programming interface forcuitblrtb'r casrt iystehiiiX^API^eCS)' IJ9: The signal classifier/filter 20 is in communication 
' '' with both the input queue 7 and the signal prtJcesSmg clitabaie .Irr the fcariy stage of a location request the signal processing 
1 subsystem 142 in Fig. 4, will receive the initiating tocatioh' request Irom either an autonomous 9-1-1 notification message from a 
:! ni 5 ' given MSC, or from a location application '(fof example', see fig. 36), fdrwhich mobile station charaaeristics about the target 

mobile station 140 (Fig. 2) is required. Referring to'fig. 29, a ^iiery is made from the signal processing controller 15 to the signal 
processing database 26, specifically the mobile itatbn tebl^ il; to : det^rmine if the mobile station charaaeristics associated with 
the NIN to be located is available in table 1 1, if the data exists then there is no need for the controller 15 to query the wireless 
network in order to determine the mobile station characteristics, thus avoiding additional real-time processing which would 
10 otherwise be required across the air interface, in order to determine the mobile station MIN characteristics, the resulting mobile 
, station information my be provided eithervia the signal, processing database 26 or alternatively a query may be^ performed direaly 
from the signal processing subsystem M'to the HSC in order to' determine the mobile station charaaeristics. 

A location application programming interface, L-API-CCS 139 to the appropriate CMRS customer care system provides 
the mechanism to populate and update the mobile station table 1 1 within the database 26. The L-API-CCS 139 contains its own set 
15 of separate input and output queues or similar implementations and security controls to ensure that provisioning data is not sent 
to the incorrect CMRS. The interface 1 155a to the customer care system for CMRS-A IfSOa provides afi autonomous or periodic 
notification and response application layer protocol type, consisting of add, delete, change and verify message functions in order to 
update the mobile station table 1 1 within the signal processing database 26, via the controller 15. A similar interface 1 155b is used 
to enable provisioning updates to be received from CMRS-B customer care system 
20 Although the L-API-CCS application message set mayte any protocol type which supports thfc autonomous notification 

message with positive acknowledgment type, the TIMI.5 group within the American National Standards Institute has defined a 
. good starting point in which the L-APJ-CG could be iraptemented.'using the robust OS I TMN X-imerface at the service management 
layer. The objea model defined in Standards proposal number TfMl^S/96-22R9 > ^^/a//^/7j>f£//7?//7/j//3^/7 P A^//7^/L?/?r^ ^ 
.. Provisioning (OAH&P) - Model for I fUerfaa Across Jurisdiahnai Boundanes to Support Electronic Access Service Ordering: inquiry 
25 functhum be extended to support the L-API-CCS information elements as required and further discussed below. Other choices in 
which the L-API-CCS application message set may be implemented include ASCII, binary, or any encrypted message set encoding 
using the Internet protocols, such as TCP/IP, simple network management protocol, http, https, and email protocols. 

Referring to the digital signal processor (DSP) 17, in communication with the signal classified filter 9, the DSP 17 
provides a time series expansion method to convert non-HBS data from a format of an signal measure data ensemble of time-series 
30 based radio frequency data measurements, collected as discrete time-slice samples, to a three dimensional matrix location data 
value image representation. Other techniques further filter the resultant image in order to furnish a less noisy training and actual 
data sample to the location estimate modules. 

Referring now to digital signal and image filter processing, by way of example, a forward-path CDMA mobile station 
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delay spread RF measurement nmpfe. h Sluscratedin FigJ 22.for.tite mobile station reception of one sample of transmission signal 
related to BS-U looted at 16th and Stout Streets. In this sample three fingers or groups of RF energy (relative signal strength is 
indicated along the vertical axis) were detected. A ftrst.CD.HA finger 'was fount? at a delay of about 3.4 microseconds, and relative 
signal strength of about -80 dBm. A second finger was found at a delay of about 5 microseconds, and peak strength of about -5S 
5 dBm t followed by a third finger at 6i microseconds and a strength of about -92 dBm. Two other base stations were deteaed, BS*5 
and BS-2, along with their respective three CDMA delay spread fingers. 

Refer now to the left image shown in Fig. 26: Delay Spread Profile Image. After 128 samples of data are collected of the 
delay spread-relative signal strength Rf data measurement sample: mobile station RX for BS-I and grouped into a Quantization 
matrix,where rows constitute relative signal strength intervals and columns define delay intervals: As each measurement row, 
10 cote pair (which could be represented as a complex* number or Cartesian point pair) is added to their respective values to 
generate a Z direction of frequency of recurring measurement value pairs or a density recurrence- function: By next applying a grid 
function to each x, y, and z value, a three-dimemiGnal surface grid is generated, which represents a location data value or unique 
print of that l2B-sample measurement; Fig. 28 illustrates the result of image generation when a number ol data samples, or an 
ensemble of signal strength, delay paris of values are added within a given-bin area or matrix, to thus create a type of three- 
15 dimensional image, representing a particularRF signaling behavior at a giveirlotation. ' ; ! • ■ ' : ,\ 

Refer now to the rigjit image shown in Fig- 26. In the general case where a mobile station is located in an environment 
with varied clutter patterns, such as tenam uwlulatiosis, unique marinade itruttifre geometries (thus creating varied muitipath 
signal behaviors), such as a city of iuburi, although the first CDMA delay spread finger may;be the same value fora fixed distance 
between th? mobile station and BS antennas, as the mobile station rnwves across such an ^ 
20 the right imago fcr the defined BS antenna sertor^ totion classes- or^squares; miraBered one through seven, are shown across a 
particular range cflisie of position (LOR). " * — " ^ r - ^ : ' ; 

A traditional TOA/TDOA ranging methotf between a given BS and tnohile- station only provides a range along the arc, 
thus introducing ambiguity error. However a unique three dimehiibhal image can be used in this method to specifically identify, 
with recurring probability, a partkutar unique location dass along the same Line Of Position, as long as the muitipath is unique by 
25 position but generally repeatable, thus establishing a method of nbt only ranging, bat also of complete latitude, longitude location 
estimation in a Cartesian space. In other words, the unique shape of the "mountain image" enables a correspondence to a given 
unique location class along a line of position, thereby eliminating traditional ambiguity error. r 

Although man-made external sources of interference, Rayleigh fades, adjacent and co-channel interference, and 
variable clutter, such as moving traffic introduce unpredictability (thus no "mountain image" would ever be exactly alike), three 
30 basic types of filtering methods an be used to reduce matching/comparison error from a training case to a location request case: 
I.) select only the strongest signals from the forward path (BS to mobile station) and reverse path (mobile station to BS), 2.) 
Convolute the forward path 128 sample image with the reverse path 128 sample image, and i.) process all image samples through 
various digital image filters to discard noise components. 

52 

SUBSTITUTE SHEET (RULE 26) 



BNSDOCID: <WO 9810538A1_L> 



WO 98/10538 




VUS97/15933 



The strongest signal technique has been discussed previously in the data filter section. Fig. 27: Convolution of Forward 
and Reverse Images, illustrates one method thai essentially nulls noiselcomptetely, even if strong and recurring, as long as that 
same noise characteristic does notoccurfm the; opposite path:,: ; ■ r . ^ ; ; ■: i : =. . 
r : i , : The third technique of processing CDHA delay spread profile images through various digital image filters, provides a 
- 5 . .resultant "image enhancement? in the sense of providing a more stable pattern recognition paradigm to the neural net location 
/estimate model. For example, image histogram equalization can be used, as illustrated in Fig. 30 (before equalization) and 31 
(after equalization) to rearrange the images' intensity values, or density recurrence values, so that the image's cumulative 
. hinogram is approximately linear. 

Other methods which can be used to compensate for a concentrated histogram include: I) Input Cropping, 2) Output 
10 Cropping and 3) Gamma Correction. Equalization and input cropping can provide particularly striking: benefits to a COMA delay 
spread profile image. Figs 32 and 33 illustrate:. the three dimensional grid images of the before and after input croppmg filter 
example.. As shown in Fig. 33, input cropping removes a large percentage of random signal characteristics that are. non-recurring. 

Other filters and/or filter combinations can be used to help distinguish between stationary and variable clutter 
affecting multipart signals. For example, h is desirable to reject multipart fingers associated with variable clutter, since over a 
IS period of a few minutes such fingers would not likely recur. Further filtering can be .used to remove recurring (at least during the 
sample period), and possibly strong but narrow ^pencils" of Rl energy. A narrow pencil image component could be represented by 
a near perfect reflective surface; such as a nearby nrntal pafiertrttck^toppedat a ti^fnc light. - 1 

. r'. On the other. hand,$tatiorary clutter.objeas, sach.as concrete dQd gtass building stirfaces^ adsorb some radiation 
\ before continuing with a,refJected ray at some delay. Such stationary clutter-affected CDMA fingers are more likely to pass a 4X4 
20 , neighbor Hedian filter as well as a 4D to SO perxent input Crop filter; and are thus more suited to 1 neural net pattern recognition/ 
Fig. 33 illustrate fnrer "pencils" of CDMA finger energy, that passed a simple 50 percent Input Crop filter. However, as shown in Fig. 
34 when subjected to a 4X4 neighbor Hedian fitter and 40 percent clipping, all five pencil-shaped fingers have been deleted, fig. 35 
: illustrates the further simplified result of a 50 percent cropping and 4X4 neighbor median filtering. Other filtering methods include 
custom linear filtering, adaptive (Weiner) filtering, and custorn noniinearjiltering.. . 
25 The DSP 17 may provide dauemsemble results, such as extraaing the shortest time delay with a detectable relative 

signal strength, to the router/distributor 23, or alternatively results may be processed via one or more image filters 19, with 
. subsequent transmission to the router/distributor 23. The router/distributor 23 examines the processed message data from the DSP 
17 and stores routing and distribution information in the message header. The router/distributor 23 then forwards the data 
messages, to the output queue 21 , for subsequent queuing then transmission to the appropriate location estimators DA module 10, 
30 TOA/TDOA module 8 or the HBS module 6 t in Fig. 

HOME BASE STATION NODULE 

Upon receiving a message from the Data Capture Gateway or the signal processing subsystem 20, the HBS location 
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estimate model examines a Home Base Station Table which defines relationships among a wireless MIN, and wireline telephone 
number, characteristics of the HBSD, and the possibility to use various signal types in order to further define the location within the 
address area of the fixed location HBSD. The following table, populated by the commercial mobile radio service provider at HBSD 
installation time, is used by the HBS model to determine location whenever the mobile station MO is located within communication 
range of the HBSD: 



Wireline 
MIN 


Wireless 
MIN 


HBSD Model 


HBSD location 

Latitude, 

Longitude 


Fixed HBSD Location 


CDMA 

Strength/Delay 
Measurements ? 


3035561234 


3035661299- . 


SonyQx-9000 ( *fivJ.I 


52.619488 N, 
112,4197601 W ., 


727 :Magnoiia Drive , Bouider<, 
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1 In tfe event Rf signals are available for telemetry frorti the HBSD tb the location system, such information may be 
1 0 solicited from the location system to the HBSD! in the form'ot a request/response message sche me, using for example , a data- 

under-voice technique. In suchases the SSP provides a dita connection with the location system 42 via the KSTN! The home base 

station may interact with the mobile station in the same manner as a cordless telephone transceiver interacts with a cordless 

telephone, when the mobile station is within an acceptable range. 

The HBS module 6 in Fig. I outputs the Latitude and Longitude location estiamtes to either the PSTN 24 or to the 
IS Internet 68, dependendtng upon the source of the originating location request. 



20 



DISTRIBUTED ANTENNA MODULE 

Upon receipt of one or more data ensemble messages from the signal processing subsystem 20 in fig. I, the distributed 
antenna (DA) module 10 queries a previously populated distributed antenna database to determine the locations of distributed 
antennas associated with the measured DA antenna "pilot delays" so that the detected signal measurement delay signal values 
received from the mobile station receivers and base station receivers can be input to the TQA/TDOA module. The TOA/TDOA module 

54 



SUBSTITUTE SHEET (RULE 26) 



9810538A1_I_> 



• "T'r 



WO 98/10538 PCT/US97/15933 

then utilizes the radius-radius method, or time difference method, in order to provide location estimates within the building or area 

- . •. . ■ ■ . .■■■.'V \l 'iU •■ 

containing the distributed antennas. 



DAISEY CHAINING BASE STATIONS 



As a practical matter it may be necessary in some network conditions to add base stations in areas to permit improved 
5- - < estimates to be achieved in wireless location. Aft aspect in this invention includes daisey chaining communication circuits or 
transport facilities between or among base stations, in order to simplify the installation and operation of such base stations. Base 
stations normally, communicate with the mobile switch center using T-carrier transport facilities, in order to carry voice and data 
bearer traffic, and to transport bi-directional control signals. However Tor various economic or other reasons it may not be 
justifiable to install such transport facilities. At the base station, by essentially originating a plurality of mobile telephone calls 

10 using the data communications option, and terminating such calls at the mobile switch center appropriately, the outputs of the 
base station transport multiplex circuits are re-directed into the data communication circuits normally intended lor use by mobile 
stations in establishing a data circuit communication call to the network Circuits at the mobile switch center used to terminate 
these data calls, redirect the communication to those circuits normally used to terminate the T -carrier facilities from the base 
stations. In this manner, existing wireless channels can be used to provide transport via this daisy-chaining method between certain 

IS base stations and the mobile switch center, thus simplifying connectivity in cases where the installation of transport facilities would 
either be impossible impractical. - 

DISTANCE FIRST ORDER NODULE (TOA/TDOA) 

Particular^istinaion^ over jtbe current state af,the art include utilizing essentially the native electronics, antennas and 
standards, and opposed to overlay solutions, suj^iyisor funaipns which control a hybrid set of techniques, including Time Of 

20 Arrival (TOA), .Time Difference of Arrival (TDpAJj in both the forward and reverse paths^pilot signal strengths, power control, 
mobile stations (mobile station) state conditions, stochastic features of environmental clutter, multipath detection and mitigation, 
and robustness, supporting a variety of conditions including degraded/faulty equipment, distributed and SMART antennas, various 
registration modes, and various call processing conditions such as soft, hard and idle hand-off conditions, location during the idle 
state, traffic-bearing states, and locatipn during cases of severe multipath, such as that experienced in urban canyon environments, 

25 as well as location in suburban and rural cases. 

Since each base station is required to emit a constant signal-strength pilot pseudo-noise (PN) sequence on the forward 
link channel identified uniquely in a network system by a pilot sequence offset and frequency assignment, it is possible to use the 
pilot channels of active, candidate, neighboring and remaining sets of pilots, associated with neighboring base stations, stored in 
the mobile station, for TOA and TDOA measurements performed by the mobile station. 

30 Based on the arrival time measurement estimates and the speed of propagation, ranges or range differences between 

the base stations and the mobile station can be calculated. TOA and/or TDOA measurements can then be input to either the radius- 
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radius multilateration or the time d*^ • i; ^ "* 

By utilizing the known base station positions; location of the mobile station c^n be determined. Since measurements 

and base station positions can be sent either to the network or the mobile station, location can be determined in either entity. 

Since not all measurements can provide accurate location results at all times and conditions; a variety of supervisory 
S logic processes can be invoked to resolve or litigate the ^rea: 

As those familiar with the EIA/TIA IS-95 and TIPI/JTC COMA standards specifications know, mobile station call 

processing consists of four states: 

1 . Initialization State - where the mobile station selects and Acquires a system, a network, and timing information. This state 
consists of foiir substates; System Determination, Pilot Channel Acquisition, Sync Channel Acquisition, and Timing Change 

10 Sisbstati • : : ' l > " ' ] : ' ' 

2. Idte State- where the mobile station monitors messages on the Paging Channel, and supports procedures such as Message 
Acknowledgment, nine modesof Registration, Idle Hand-off, Pilot Search, and response to Overhead information such as 
System and Access Parameters (which include BS Latitude and Longitude); mobile station Message Transmission Operation 
(Le n Data Burst) and Neighboring List messages; 

15 I: System Access State - where the mobile station sends messages to the base station oh the Access Channel; This state consists of 
six substates: Update Overhead, Origination Attempt, Page Response, mobile station Order/Message Response; Registration 
Access; Message Transmission Operation/Data Burst); s - 1 ^ 

4. Mobile station ) Control oh the Tralfic Channel Sm station communicates with the primary base station 

using the forward and Reverse Traffic Channels. This state consists of five substates: ^ 
20 Waiting for mobile station AnwenConveM 

v ■ components of pilots), and fokase. - v; ~ :: - • * ■ 

At power-up an lS-95 or TIPt PCS CDMA compliant mcioiie station inters Initialization Stx^ IS-95, 
section 6.6.1. During the System Determination substate, the mobile station refers to its internal memory to acquire preferences for 
system carrier (A or B), or the preferred carrier at 1.8-2.0 "GHz, and for other types of service, including advanced mobile phone 
25 service, or AMPS, as well as narrow band advanced mobile phone service, or NAMPS. 

A CDMA-preferred mobile station then transfers to the Pilot Acquisition^^. The mobile station tunes to the CDMA 

Channel number equal to CDMACH S then sets its Walsh code (always WO) for the Pilot channel where it begins searching for pilot 

energy, in terms of energy per bit, per spectral density. 

Once a sufficiently strong (as defined by the T ADD threshold parameter) pilot channel has been identified within 

30 T2Q m seconds, the mobile station enters the Sync Channel Aquisitioh^ix^vt, where the mobile station receives a Sync channel 

Message that includes, among other information, system time and the unique PN offset index for that particular BS. In the Timing 
fAj/r/f substate, the mobile station adjusts its internal timing to match the BS's CDMA system time. At the completion of the 
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Timing Change substate, the mobile station is complei€(y.}WtoBi?;«d to the GDMA system's BS time. 
,. Aftersatixfaaory ^nchronizatjqnthe^pb^ where the paging channel begins 

. to be monitored. : \ -\ ' moj^m : \r-* -.,,.« y ■ 

. Vf :.. At this point at least two-alternatives are possible: ^ 

5 I. Perform Location determination without CQpsumption of user-perceived air time via the introduction of a new call 
. ;; processing state, or . . , . : ; ; ^ r ; 
2. Perform Location determination via the traffic channel (requires air time) 

In cases where Distributed Antennas (OAs), and/or.Home Base Stations (HBSJ are used, each location of these devices 
, can be sent to the mobile station. There are at least three format-types possible, jn conyeying.this type of location information in 
10 the GeoLocation Message. First, A unique identifier can be assigned to each DA/HBS, such as a fully distinguished name. An example 
of location information could be: Within the U$A, State of,Colprado, city $ Denver, with Service: Provider xyz, BS ID. 129, 
. Distributed Antenna number 8., Or.more. compactly, the location string is structured as,;;ySA.COJEN.xyz,l29.DA8". Secondly, an 
easy-to-understand human style data.message can be sent, such as, "hu are near the 30th floor of the Sears Tower building". 
Third, data values for Latitude, Longitude, and possibly altitude and accuracy could be sent from the BS or Location Center to the 
, 15 . mobile stationAU ( M LU" denottng . ln-cipje^to be.most easily useful to and end-user, ii> the iirit and third cases, a database would 
be needed within the roobiie staticjii or a Persqnal Digital Aisistajttdeyice, which performs a translattAn of numerical-data into a 
form useful for human understanding. >ti j^V- ^ i*v.:<v ^ :- : 1 . :/ ■ 

. ..The mobile station thus maintains ajist of location pilot offsets, .where the: list is yanked based on a weighted 
combination of received signalenergy ^qd BS Ipcation.Jhe iTf0^ite L sta^on r $e|eas the ; best candidate BSs for location-estimate 
20 purposes, whichmay be slightly different from die, Aa 

Additionally the mobile station may send a Data Burst message back to the BS or Location Center, informing that no 
other Pilot Channels were detected. This M negative w Venn diagram information may be useful with various heuristics for location 
estimate deduction, for example, to note where the mobile station is not located. , 

It is the difference of system time values (as opposed to their absolute values) that is important. Note that for purposes 
25 of location, any communication back to a BS 122 would require re-synchronizing onto that BS's system time. Although not specified 
in either IS-9S or Tl PI/JTCs PCS CDMA standards, most mobile station manufacturers build correlators with resolutions of 
approximately 1/8 PN chip, which is about 125 nS. A location equipped mobile station will provide + /• 1 25 nS. accuracy, which is 
about + /- 125 feet 

The mobile station or location entity can process the arrival time estimates in at least two ways, first the mobile station 
30 may difference the measurements (preferred) to form time-difference-of-arrivals (TDOA); or second, the mobile station may 
determine absolute time-of-arrival (TOA) by solving for the clock bias between the mobile station and other CDMA system time 
reports. TOA requires very well calibrated BS system clocks among each other. 

The following procedure illustrates significant capabilities hidden in the CDMA standards, which provide a substantial 
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enabling base with which to provide the measurements and data fcr this inventions' location methods. 

First the BS sends the Neighbor Lin Update Message, containing a complete lis; of the neighboring pilot PN sequence 
offset indices (i.e^ via the NGHBRPN Field) associated with candidate BSs in the area, with which the mobile station could 
possibly scan (or detecting usable earliest arriving neighboring useable BS multipart components. This list should typically be a 

S complete list, as opposed to the presumed candidate subset. If the mobile station is not already in the Traffic/Conversation State, it 
could invoke this state by calling a dialable telephone number in the network, e.g., a designed "Quiet Line" This approach also 
allows a billing record to be generated according to routine wireless telephony practice. If the network is to determine location, 
then the network pages the mobile station 140, connecting the mobile station to a Quiet Line/Voice message upon mobile station 
answer. Note that it may be desirable tc suppress the mobile station ringer sounding for certain location applications. Other 

10 methods may also be possible. 

During installation, each BS 122 in a particular area is provisioned with the locations of all possible neighboring BSs in 
its area. The BSs 122 use this information to populate a list of all Latitudes and Longitudes which can be sent to the Ills, using the 
Heighbof List Update message. Second, assuming that the mobile station does not currently have this data or if unknown, then the 
: BS shall send a series of Mobile Station Registered Messages, each message containing the latitude and Longitude values (i.e. t the 

1 5 BASE_UT and BASE_L(M fields) associated with a neighboring BS pilot PN off set -sent -with the first message/Note that the 

constants N^ m , Supported Traffic Channel Candidate Active Set size, normally set to 6, arid Ny mf Supported Traffic Channel 

Candidate Set sue, normally set to;S t aisd Ng^. the Minimum Supported Neighbor-Set size, normally set to 20;'sfibuid be sufficient 

for most location purposes, however these constants could be changed if the need arises. 

' Third, the BS saves the current fJlDD and f DROP values in the BS memory, associated with the In-Traffic LU, and 

20 sends the In-Traffic System Parameim\iti&gt t which includes reduced f ADD and TJJROP parameter values, useable for 
location purposes. The value (or T ADD would typically be set to a value near the lower end of the IS-98 specification, possibly 
below the 80 dB dynamic range requirement, close to (but not including) the thermal noise power level of the LU receiver. Note 
that if the LU is using restricted battery, e.g., a portable, then the time for keeping T AOD and TDROP at a low value for location 
estimates purposes, should be kept short to conserve advene consequences, such as increased current drain and noise. 

25 Reduced T jlDD and T DROP values sent to the mobile station will cause the LU to scan all conceivable neighboring BS 

pilots provided to it by the BS, and to measure the strengths of each received pilot, and to determine the pilot arrival time for each 
pilot offset: Note that the signal strengths now measured may not be sufficient for carrying traffic, but may be sufficient for 
location purposes. 

Assuming the network is to determine location, then the mobile station reports the arrival time, PILOMRRIVAL, for 
30 each pilot reported to the base station. According to the standard the arrival time is measured relative to the mobile station's time 
reference (which was previously determined from the active BS), in units of PN chips (I/22BB) microseconds, or about 814 
nanoseconds, as follows: 
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IS 

PILOT PN-PHASE = (PILOI^ARRIVAL t*- (^4 JE,PJLOT^*N))rnod 2 , 

where PILOTPN is rtie PN sequfcrtce offset ihdex -df the pilot associated with the BS pilot indices in the neighbor list. 
In order to achieve location accuracy estimates on the order of a few hundred feet (or nanoseconds) a higher resolution 
" than I PN chip is required- Although not specified dirVrtfy irt i$-95, most mobile manufacturers use correlators with resolutions of 
] $ l : approximately l/fl PN chip, or about 102 nS (suggesting that if no other iystemic errors are present, about 102 feet of error is 

expected). Note that the search window size SRCH_WIN for each pilot may need to be increased if there are substantial delays 

experienced from the environment. It is desirable for the mobile statioptq report th^ second and third arrival time (or the second 
and third fingers), and their relative signal strengths, corresponding to each detectablfc.Pilpt, Channel,; . 

If more than one PILOT_ARRIVAL is available then a basic TDOA multiiateration aJgo/itlim may.be invoked, at either 
10 the LU, or the network. In the network case, the aaiye.BS 122 must send a Pilot Aequest^rdfinforPilot Measurement Request 
. Order (ORDER code OIOOOI^ which causes t(ie mobile station U0 to forward its measurements to the BS (and consequently the 
jietwork, as appropriate)., • ; ...- ;! . :: j ■ •-.n-' , ; .-> ■>, , . : 

. ■ „. ■ At this poinit a minimally sufficient number of measurements are available toperform a location estimate. Thus the BS 
. should restore the priginaLT jADD and T^DROP values (previously savedin feB&memory); uuhe mobile> c station, via the //?- 
IS Traffic SfXemParameterstieyagt. % ^ ^ 

Additional information may be desirable, such as the active BS* TOA measurement, as well as associated BS 
. x ■ measurements^ tbe;mobi|e: spition f s TOA tp;tbeir BS location. This.added ifrfprmiation may besent to the mobile station if the 
mobile station is to perform location, via the Data Burst ffessageon the forward 'Traffic Channel, Since 26 combinations of data 
burst types have been reserved for future use in the standard, dedication of several combinations could be used to telemeter 
20 location-related data. In cases where duplicate ranging or other information is available, various supervisor techniques mentioned 
elsewhere in this document, could be used to refine the location estimate. 

Once the location estimate has been performed, any number of means could be used to provide the results to the end 

user. 

The IS-95 and J-STD-OOB CDMA specifications require that BSs should be synchronized to within + /- 3 microseconds of 
25 CDMA system time and shall be synchronized to within + /- 10 microseconds. This invention disclosure method assumes the cost of 
GPS receivers is rebtively small, thus time calibration at a more precise calibration level at each location BS is recommended to be 
used by using the very accurate GPS time parameters. Preferably the absolute error deviation among surrounding or neighboring 
base stations should be less than 800 nanoseconds, however in most cases this should not be a fixed requirement, but rather a 
preference. In cases where absolute BS timing is prohibitively expensive, then the "Forced Hand-off method discussed below can be 
30 used to overcome the preferred, or strict absolute BS timing requirements. 

Three methods have been currently identified. Some of these techniques apply to other air interface types as well. 
I. Use the first finger at BS (Absolute Ranging), and if detecteable, invoke a "Forced Hand-off" between the mobile station and a 
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neighboring BS, for a time sufficient to complete signal measurements between a mobile station transmitter and a BS 
receiver, and if possible, between a BS traosmi^rand.a.jnpbile station receiver, which gives access to as many BS's 
as can be detected either by the mobile station receiver or the surrounding BS receivers. 

2. Use the first finger at mobile nation (Differential Ranging) to obtain differentia) time readings of pilot channel from mobile 
5 station I 

3. Use the Pilot Power Level Measurements and Ground Clutter (Stochastic information) 

Now in the general case where three or more BSs can either determine TDOA and/or the mobile station can telemeter 

such data to the location entity within the network, repeat this method for BSj and BS3, and BS3 and BS|, in order to determine 

the remaining curves, thus yielding location within a 2D space. In the case of 3D geometry (such as a multi-story building with 
10 multi-floor pico BS cells), the process must be repeated a fourth time in order to determine altitude. 
MATLAB MathWorks code to implement the above algorithms follows: 
cleanhold off; 
j = sqrt(-l); 
stepsize = 0.03; 

is : ' v v- ; 

# Set up BS variables 

theta = pi/3*ones(3,l); ' vi " - ; ^: ■ •-• 

D = IO*ones(3,I); ; ■ ■ ^ ' ;r ; ' - 

2(1) = 0; 

20 z(2) = 0(1); - 

i(3) = D(3)*exp(-j*theta(l)); -V^ 1 > ' '•' ' — ' 

# Oefine the distance parameters 
d = [06.4-6.8]'; 

25 locationl = Q; 

Iocation2 - Q; 
Iocation3 = Q; 

# Iterate and solve for the location with respect to the first BS (at (0,0) ) 
30 t2 = -pi:fc05:O.Q5; 

fortl = -pi/3;0.05:0.05, 
tl =tl +0.001; 

rl = L/(exp(i*tl)^xp(i*t2)) *(D(l)-d(l)*exp(j»t2)); 
r2 = i./(exp(j*tl)-exp(j*t2)) *(D(l)-d(l)*exp(j*tl)); 
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temp = arg(rl); 

'**"■' index = find(abs(temp) ^ = ^^(absiiemp))]) ^ i l/ * " ' '"' 

location! =■ [locationl;rl(index)*exp(j*tl)]; v 1 ' : " ; : ' ' ' ' i; 
.jiii'';.':* • . end;-' < • * ; ,■ • 1 ■ : " >•"■'■■'.: y - : 5 ■ 

5 for tl = -pi/3:O.O5:O.05 

tl = tl H-O.OOI; * j , t ■ ■ j ; '.! r •.■ . . 

. . ri - K/(exp(rtl)^p(i»l2)) •(D(2).d(2)* ? xp(i*t2)); 

r2 = L/(exp(j*tl)^p(j-t2)) *(D(2)-d(2)*exp(i*tl)); 
temp = arg(rl); 

10 . index == find(abs(temp) '='= min(abs(temp))); . - w ■ v- . > 

iocation2 = [location2;ri(index)*exp(j*tl)]; , .,.! , . 

end; , • • . . •• , - ■■■ - v . . ;V > 

lor tl = -pi/3:O.O5:0.05 
tl =tl +0.001; 

15 rl = l7(exp(j*tl)-«pO*t2)).*(D(l)-<J{3)*exp(j*t2)); 

r2 = L/(£xp(j*tl)^xp(j-t2))*(D(l)-d(3)*exp(j*tl)); 
temp = arg(rl); 

index = find(abs(temp) == min(abs(temp))); . . ■ . ; ■ 

location3 = [location3;rl(index)*exp(j*tl)]; , , r 

20 end; 

location2 = Iocation2*exp(j*arg(z(3)-z(2))) + z(2); 

location3 = location3*exp{j*arg(z(l)-z(3))) + z(3); «■;.'■ 
set yrange [-10:1]; 
setxrange [-1:11]; 
25 plot([i;z(l)]) 
hold on 

plot(locationl) 
plot(location2) 
plot(location3) 

30 

WIRELESS LOCATION DATA COLLECTION 

It is worthwhile to discuss techniques for both obtaining the initial collection of verified location data, as well as how 
additional location data can be obtained for updating the data in this data base in a straightforward cost-effective manner. 

Regarding both the obtaining of the initial collection of verified location data as well as gathering data updates, it is 
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believed that some of this data an be obtained from the initial and continued engineering of the base station infrastructure by the 
wireless telephony service provider(s) in the radio coverage irea. 'Additional verified location data can be obtained by trained 
technicians driving and/or walking certain areas and periodically, at each of a plurality of locations: (a) determining a location 
estimate (using, for example, GPS it possible and/or offsets from GPS readings); and (b) using an mobile station 140 at the location 
5 to generate location data communication with the wireless base station infrastructure. Vi 
Alternatively, it isa novel aspect of the present invention that a straightforward method and system for gathering 
verified location data has been discovered, wherein a conventional mobile station 140 can be used without any additional 
electronics or circuit modifications. One embodiment of this method arid system utilizes the personnel of businesses that travel 
predetermined routes through the radio coverage area (e.g., a delivery and/or pickup service) to generate such data using a 

10 conventional mobile station 140 while traversing their routes through the radio coverage area. One example of such personnel is 
the postal workers, and in particular, the mail carriers having predetermined (likely repetitive) routes for mail pickup and/or 
delivery at predetermined sites (denoted hereinafter as "mail pickup/delivery sites" or simply "mail sites"). By having such mail 
carriers each carry a conventional mobile station 140 and periodically generate location data communication with the wireless 
base station infrastructure at mail sites along their routes, additional verified location data can be added to the Location Data 

15 Base 1 129 cost effectively. ' ' 

to describe how this can be performed, a brief description of further features available in a typical mobile station 140 is 
needed. At least some modules of mob;!e station 140 have the following capabilities: 

(27.2.1) a unique mobile station 140 identification number; in fact, every mobile station 140 must have such a number 
(its telephone number); ' ; ' ^ 

20 ' (27 the mobile station 140 has a display and a display memory for presenting stored data records having 

telephone numbers and related data to a user. Further, some portion of each data record is annotation and some portion is able to 
be transmitted to the wireless base station network. In particular, the mobile station 140 is able to store arid recall data records of 
sufficient sue such that each data record may include the following information for a corresponding mail pickup/delivery site along 
a mail route: (a) an address or other textual description data (e.g., an English-like description) of the mail pickup/delivery site; (b) 

25 a predetermined telephone number; and (c) a numerical code (denoted the "site code" hereinafter) associated with the mail 
pickup/delivery site, wherein the site code is at least unique within a set of site codes corresponding to the mail sites on the mail 
route. In one embodiment, the memory may store 99 or more such data records, and the display is scrollable through the data 
records; 

(2723) the mobile station 140 can have its display memory updated from either an RS232 port residing on the mobile 
30 station, or from an over-the-air activation capability of the wireless network; 

(272.4) the mobile station 140 has a pause feature, wherein a telephone number can be dialed, and after some 
predetermined number of seconds, additional predetermined data can be transmitted either through additional explicit user 
request (e.g., a "hard pause"), or automatically (e.g., a "soft pause"). Moreover, the additional predetermined data can reside in 
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the display memory. - n^-' <- : - ■ • ■ ■ ■ 

Assuming these features, the following step.V^n be p€ rjprme d f o r acq u i n n g additional verified location data: 
(273.1) for (at least some of the) postal carriers having predetermined routes of addresses or locations visited, the 
postal carriers are each provided with an mobile station 140 haviag the; capabilities ^scribed in (27.2.1) through (27.2.4) above, 
5 wherein the memory in each provided mobile station has a corresponding list of data records for the addresses visited on the route 
of the postal carrier having the mobile station. Moreover, each such list has the data records in the same sequence as the postal 
carrier visits the corresponding mail sites, and each data record includes the information as in (27.2.2) for a corresponding mail 
site the postal carrier visits on his/her mail route. More precisely, each of the data records has: (a) a description of the address or 
location of its corresponding mail pickup/delivery, site, (b) ? telephone number, for dialing a data collection system for the location 

10 center 142 (or, alternatively, a reference to a memory area in the mobile station haying this telephone number since it is likely to be 
the same number for most data records), and (c) a site code for the mail pickup/delivery site tijat is to be transmitted after a 
predetermined soft pause time-out. Note that the corresponding list of data records for a particular postal route may be 
downloaded from, for example, a computer at a post office (via the RS232 port of the mobile station ( 40), or alternatively, the list 
may be provided to the mobile station 140 by an over-the-air aaivation. Further, there are various embodiments of over-the-air 

1 5 activation that may be utilized fay the present invention. In one embodiment, the postal carrier dials a particular telephone number 
associated with data collection system and identifies both^ini/hersejf by his/her, persorpl identificatipn 1 numbf r (PIN), and the 
postal route (via a route identifying code). Subsequently, t/ie mail pickup and delivery sites along the identified route are 
downloaded into the memory of. the mobfte station J40 via wireless sigoajs to, the mobile station 140. However, additional over- 
the-air techniques are also within the scope of the present invention such as: 

20 (a) If the postal carrier's route is already associated with the carrier's; PIN for over-^he-air activation, then.the carrier may only 
need to er^ter his/her PIN. . ^ > 

(b) If the mobile station 140 is already aswcat^d with a particular route, then the carrier may only need to activate the mobile 

station 140, or alternatrveiy, enter his/her PIN for obtaining an over-the-air download of the route. 

(c) Regardless of how the initial download of mail sites is provided to the mobile station 140, it is also an aspect of the present 
25 invention that if there are more mail sites on a route than there is sufficient memory to store corresponding data 

records in the mobile station, then the data records may be downloaded in successive segments. For example, if 
there are ISO mail sites on a particular route and storage for only 99 data records in the mobile station, then in one 
embodiment, a first segment of 98 data records for the first 98 mail pickup/delivery sites on the route are 
downloaded together with a 99 th data record for transmitting an encoding requesting a download of the next 52 
30 data records for the remaining mail sites. (Alternatively, the data collection system may monitor mobile station 

140 requests and automatically detect the last location capture request of a downloaded segment, and 
subsequently automatically download the next segment of mail site data records). Accordingly, when the data 
records of the first segment have been utilized, a second segment may be downloaded into the mobile station 140. 
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Moreover, at the Send of the last segrrie ht f the data collection system may cause the first segment for the route to be 
automatically downloaded into the mbbile station 140 in preparation for the next traversal of the route. 
(2732) Given that a download into the mobile station 140 of (at least a portion of) the data for a postal route has occurred , 
the postal carrier traversing the route then iterative!/ scrolls to the next data record on the list stored in the 
5 mobile station as he/she visits each corresponding mail pickup/delivery sitei and activates the corresponding data 

record. That is, the following steps are performed at each mail pickup/defivery site: 
(a) As the postal carrier arrives at each mail pickup/delivery 1 site, he or she checks the scrollable mobile station 140 display to 

assure that the address or location of the mail pickup/delivery site is described by the data record in the portion of 
the mobile station display for activating associated data record instructions. 
10 (b) The postal carrier then merely presses a button (typically a "send" button) on the mobile station 140 for concurrently dialing 
the telephone number of the data collection system, and initiating the timer for the soft pause (in the mobile 
station 140) associated with the site code for the mail pickup/delivery site currently being visited, 
(c) Given that the soft pause is of sufficient length to allow for the data collection system call to be setup, the mobile station 140 
then transmits the site code for the present mail pickup/delivery site. 
15 (d) Upon receiving the telephone number of the mobile station 140 (via automatic number identification (AIN)), and the site code, 
the data collection system then perfonns the fbliowing steps: 
(dl) A retrieval of an identifier identifying the route (route ill), tlote this may be accomplished by using the telephone number of 
* the mobile station. That is, when the data collection system first detects that the mobile station 140 is to be used 
on a particular route, the telephone numberof the mobile station and the route id may be associated in adata base 
20 so that the route id can be retrieved using the telephone number of the mbbile stat ion. . 

(d2) A retrieval of a iocatton representation (e.g M ^ the mail pickup/delivery site 

identified by the combination of the route id and the "site code is performed by accessing a data base having, lor 
each mail she, the following associated data items: the route id for the mail site, the site code, the mail site address 
(or location description), and the mail site location representation (e.g., latitude, longitude, possibly height). 
25 (d3) A request to the location center 142 is issued indicating that the location data for the mobile station 1 40 (resulting from, 
e.g., the call being maintained between the mobile station and the data collection system) is to be retrieved from 
the wireless network, temporarily saved, and a location estimate for the mobile station is to be performed. 
Accordingly, the data collection system request to the location center 142 the following: 
(i) the telephone number of the mobile station 140; 
30 (A) the retrieved location of the mobile station 1 40 according to the route id and site code; 

(iii) a request for the location center 142 to perform a location estimate on the mobile station 140 and return the location 

estimate to the data collection system; 

(iv) a request that the location center 142 retain the location for the mobile 
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station 140 and associate with it the location of the mobile station 140 received from the data collection system. 
Regarding step (iii), the location «timate may: also include the steps temporarily increasing the mobile station 
transmitter power level . 

(27 J J) Subsequently, given that the location center 142 performs as requested, when the data collection system receives the 
S mobile station 140 location estimate from the location center v the data collection system first associates the returned mobile 

station location estimate with the corresponding data collection system information regarding the mobile station, and 
secondly, performs "reasonability" tests on the information received from the mobile station 140 for detecting, filtering 
and/or alerting systems and personnel whenever the postal carrier appears to be transmitting (via the mobile station 140) 
from a location different from what the route id and site code indicate. The following are examples of such reasonability tests: 
10 (a) If a threshold number of postal carrier transmittals disagree with the location center 142 estimate by a predetermined distance 
(likely dependent upon area type), then tag these particular transmittals as problematic and mark all transmittals 
from the mobile station 140 as suspect for "distance" inaccuracies. 

(b) If there is less than a threshold amount of time between certain postal carrier transmittals, then tag these particular 

transmittals as problematic and mark all transmittals from the mobile station 140 as suspect for "time" 
IS inaccuracies. , t 

(c) If an expected statistical deviation between a sampling of the postal carrier transmittals and the location estimates from the 

location center 142 vary by more than a^thresholij amount, then tag these particular transmittals ^s problematic 
and mark all transmittals from the mobile station 140 as suspect for "statistical" inaccuracies. 

(d) If an expected statistical deviation between a sampling ohhe times of the postal carrier transmittals and an expected timing 
20 between these transmittals vary by more than a threshold amount, then tag these particular transmittals as 

problematic and mark all transmittals from the mobile station 140 as suspect for "statistical" inaccuracies. 
(273.4) When suspect or problematic mobile station location information is detected (e.g., incorrect site code) in step (2733), the 
data collection system may perform any of the following actions: 

(a) Alert the postal carrier of problematic and/or suspected inaccuracies in real time, after a certain number of transmittals or at a 
2S later time. Note that such alerts as well as positive feedback at the end of the postal carrier's route (or segments 

thereof) may be advantageous in that it likely inhibits the postal carrier from experimenting with transmittals from 
locations that are purposefully inaccurate, but at the same time provides sufficiently timely feedback to encourage 
a conscientious postal carrier. 

(b) Alert the Postal Service of perceived discrepancies in the mobile station 140 transmittals by the postal carrier. 
30 (c) Dispatch location center technicians to the area to transmit duplicate signals. 

(2735) If the transmittal(s) from the mobile station 140 are not suspect, then the data collection system communicates with the 
location center 142 for requesting that each location received from the mobile station 140 be stored with its corresponding 
retrieved location (obtained in step (d2)) as a verified location value in the Location Data Base 1 129. Alternatively, if the 
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transmittals from the mobile station 140 are suspect, then the data collection system may communicate with the location 
center 142 for requesting that at least some of the location data from the mobile station 140 be discarded. 

Note that a similar or identic?! procedure to the steps immediately above may be applied with other services/workers 
such as courier services, delivery services, meter readers, street sweepers, and bus drivers having predetermined routes. 

S WIRELESS LOCATION APPLICATIONS 

After having determined wireless location from a base technology perspective, several applications are detailed below, 
which provide the results of the location information to a variety of users in various channels and presentation schemes, lor a 
number of useful reasons and under various conditions, the following applications are addressed: (L) providing wireless location to 
the originator or another, using either the digital air interlace voice channel or a wireline channel, and an automatic call 

1 0 distributor; (2.) providing wireless location to the originator, or another, using either the digital air interface voice channel or a 
wireline channel, and a hunt group associated with the central office or a PBS group; (I.) providing wireless location to the 
originator or another, using either the digital air interface text paging, or short message service communications channel; (4.) 
providing wireless location to the originator or another, using the Internet, and in one embodiment, using netcasttng or "Push" 
technology; (5.) selective group, multicast individualized directions with optional Conferencing; (6.) rental car inventory control 

15 ' and dispatch; (7.) vocalized directions and tracking; (8.) wireless location and court ruling/criminal Incarceration validation; (9.) 
flexible delivery of wireless location information to public safety answering pbints; (10.) trigger-based invehtbry and tracking; (II.) 
group, e.g., family; 1 safety and conditional notification; (12.) wireiess lotation-based retail/merchandising services; (13.) location- 
based h bme/dff ice/Veh icle security management; (&) infrastruaure-supported wireless location using haiid-aauated direaionai 
finding; (14.) infrastruaure-iupported intelligent traffic and highway management; (IS.) fiarametric-driven intelligent agent- 

20 based location services. Each of these wireless location applications is discussed in detail below. ' 

Referring to Fig! 36; i user (the initiating ^lier) f destrmg the lotitii>n 6f a tafgei rriobiie station 140a, such as a user at 
a telephone station 162 which is in communiatibh whh a tandem switch mobile station 140b, or any other 

telephone' station user, such as a computer program, dials a publicly diaiable telephone number which terminates on the automatic 
call distributor 546 (ACO), associated with the location center 142. If the caller originated from an mobile station 102, then the call 

25 is processed via a basis station 122 to a mobiles switch center 108. The mobile switch center recognizes the call is to be routed to the 
PSTN 124 via an interoffice trunk interface 600. Th* PSTN 124 completes the call to the ACD 546, via a trunk group interface 500. 
Note that the initiating caller could access the ACD 546 in any number of ways, including Various Inter-LATA Carriers 492, via the 
public switched telephone network (PSTN) 124. The ACO 546 includes a plurality of telephone network interface cards 508 which 
provide telephony channel associated signaling functions, such as pulse dialing and detection, automatic number identification, 

30 winking, flash, off-hook voice synthesized answer, dual tone multi frequency (DTHF) detection, system intercept tones (Le., busy, 
no-answer, out-of-service), disconnected, call progress, answer machine detection, text-to-speech and automatic speech 
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recognition. Note that some of these functions may be implemented with associated digital signal processing cards connected to the 
network cards via an internal bus system. Ah assigned telephone network interface card 508 detects the incoming call, provides an 
off-hook (answer signal) to the calling party r v the h firovides a texVio speech '(tTS) message, via an assigned text-to-speech card 512 
indicating the nature of the call to the user, collects the automatic number identification information if available (or optionally 

S prompts the caller for this information), then proceeds to collect the mobite identification number (MIN) to be located. MIN 

collection, which is provided by the initiating calfer through keypad signaling tones, can be achieved in several methods. In one case 
the network card S08 can request a TTS message via text-to-speech i card 512, which prompts the initiator to key in the MIN number 
by keypad DTHf signals, or an automatic speech recognition system can be used to collect the MIN digits. After the MIN digits have 
been collected, a location request message is sent to a location application 146. The location application 146, in concert with 

10 location application interface 135, in the location system 42, is in communication with the location engine 139. Note that the 
location engine 139 consists of the signal processing; subsystem 20, and one or more location estimate modules, i.e., DA module 10, 
TOA/TDOA mocule 8 or HB5 module 6. The location engine 139 initiates a series of messages, using the location application 
programming interface 136 to the mobile station 108. The location application programming interface 136 then communicates with 
one or more mobile switch centers 108, to determine whether ornot the mobite station 140 to be located can be located. Conditions 

15 regarding the locateability of an mobile station 140 include, for example; mobile station 140 powered off, mobile station 140 not in 
communication range, mobile station J40 roaming state not known, mobile station, 140 not provisioned for. service, and related 
conditions. If the mobile .itatjon 140 anrat. be loated then appropriate error response message is provided to the initiating 
caller, via e-mail, using the web server 464 in communications with the Internet 468 via an Internet access channel 472 or 
alternatrvely.the error response message, may be sent to a text jo > spfech card, 512, which js in communications with the initiating 

20 caller via the telephone interface card 508 and the ACD 546, which is in communication via telephony interface circuits 500 to the 
PSTN 124. 

Note that in cases where rendering location estimate information is required on the Internet, the web server cna include 
the provision of a digital certificate key, thus enabling a secure, encrypted communication channel between the location web server 
and the receiving client One such digital encryption^key capability is a web server provided by Netscape Communications, Inc. and 
25 a digital certificate key provided by Verisign, Inc. both located in the state of California, U J JL 

The PSTN 124 completes routing of the response message to th? initiating caller via routine telephony principles, as one 
. skilled in the art will understand. Otherwise the mobile station 140 is located using methods described in greater detail elsewhere 
. herein. At a high level, the mobile switch center 112 is in communication with the appropriate base stations 122, and provides the 
location system 42 with the necessary signal and data results to enable a location estimation to be performed by the location engine 
30 139. Once the location has been determined by the location engine 139 m terms of Latitude, Longitude and optionally height if 
known (in the form of a text string), the result is provided by to the initiator by inputting the location text string to a text-to- 
speech card 512, in communication with the assigned telephone interface card 508, via the automatic control distributor 546, 
completes the communication path and location response back to the initiating user via the telephone interface 500 to the PSTN 
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124, and from the PSTN 124 to the initiating user. 

Alternatively the location results from the location application 146 could be provided to the initiating caller or Internet 
user via a web server 464 in communication with the Internet 468, via an Internet access channel 472 and a firewall 474. In 
another embodiment, the location results determined by the location application 146 may be presented in terms of street addresses, 
5 neighborhood areas, building names, and related means familiar to human users. The alternative location result can be achieved by 
previously storing a relationship between location descriptors familiar to humans and Latitude and Longitude range values in a 
map database 538. During the location request the location application 146 accesses the map database 538, providing it with the 
Latitude and Longitude information in the form of a primary key which is then used to retrieve the location descriptor familiar to 
humans. Note that to those skilled in the art, the map database 538 and associated messaging between the map database 538 and 
10 the location application 146 can be implemented in any number techniques. A straightforward approach includes defining a logical 
and physical data model using a relational database and designer environment, such as "ORACLE 2000" for the design and 
development, using a relational database, such as the "ORACLE 73" database. 

In an alternative embodiment, the location application 146 may be internal to the location system 142. as one skilled in 
the art will understand. 

15 Referring to Fig. 37, a user - the initiating caller, such as an mobile station 140b or desiring the location of an mobile 

station 140a, signals to the primary base station 122, in connection with the mobile switch center 108 via transport facilities 176, 
The mobile switch center 1 12 is connected to the PSTN 124, via interoffice trunks 600. The initiating user dials a publicly dialable 
telephone number which is then routed through an end office 496, to a telephone interface card 247. via a telephone hunt group 
500. The hunt group 500 provides a telephony connection to the interface card 247 associated with the location system 228. The 

20 hunt group trunk interface 500 is provided from an end office telephone switch 496! Note that the initiating caller could access the 
telephony interface card SOB, via hunt group trunk interface" 500 in any number of ways, including an InterLATA Carrier 492, via 
the public switched telephone network (PSTN) 124. The hunt group trunk interface 500 is in communication with a plurality of 
telephone interface cards 508. The interface cards 247 provide telephony channel associated signaling functions, such as pulse 
dialing and detection, automatic number identification, winking, flash, off-hook voice synthesized answer, dual tone muiti 

25 frequency (DTHf ) detection, system intercept tones (i.e^ busy, no-answer, out-of-service), disconnected, call progress, answer 
machine detection, text-to-speech and automatic speech recognition. An assigned network interface card 247 detects the incoming 
all, provides an off-hook (answer signal) to the calling party, then provides a text to speech (TTS) message indicating the nature 
of the call to the user, collects the automatic number identification information if available (or optionally prompts the caller for 
this information), then proceeds to collect the mobile identification number (MIN) to be located. KIN collection an be achieved in 

30 several methods. In one case the network card 247 can request a TTS message, generated by a voice synthesizer or text to speech 
card SI2, which prompts the initiator to key in the MIN number by keypad tone signals, or an automatic speech recognition system 
can be used to collect the MIN digits. After the MIN digits have been collected, a location request message is sent to an application 
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146 in the location system 42. The application 146 in location system 42 initiates a series of messages to the mobile switch center 
I I2 t and optionally to the home location register 460, to determine whether or not the mobile station MO to be located can be 
located. If the mobile station 140 cannot be located then an appropriate error response message is provided to the initiating caller, 
via e-mail, test to speech card 512, web server 464' in communications with the public Internet 468, or similar means. Alternatively 
5 the last known location can be provided, along with the time and date stamp of the last location, including an explanation that 
current location is not attainable. Otherwise the mobile station 140 is located using methods described in greater detail elsewhere 
in this patent. At a high level, the mobile switch center 112 is in communication with the appropriate base stations 122 and I22h, 
and provides the location system 42 with the necessary signal and data results to enable a location estimation to be performed by 
' the location system 42. Once the location has been determined by the location system 42 in terms of Latitude, Longitude and 
10 optionally height if known (in the form of a text string),' the result is provided back to the initiator by inputting the location text 
string to a text-to-speech card 512,' in communication with the assigned telephone interface card 508. The interface card 508 then 
provides the audible, synthesized message containing the location estimate to the initiating caller. Alternatively the location results 
could be provided to the initiating caller via a web server 464 ^communication with the Public Internet 468, using standard client 
request-response Internet protocols and technology, location system 42 access to a geographical information system or other 
15 mapping system could also be used to further enhance the user understanding of the location on a map or similar graphical display. 

Referring to Fig. 38, a user (the initiating caller) desiring the location of an mobile station 140, such as a wireless user 
140 'who has text paging service provisioned, dials a publicly dialable telephone number, carried to the PSTN 124 which terminates 
on an end office 496 based hunt group interlace 500, which in turn is in communication with the location system 142. The mobile 
switch center 112, local tandem 317 and interLATA Carrier tandem 362 are in communication with the PSTN 124, as tnose skilled in 
20 ! the art will understand! Mote that the initiating caller could also be a wireline user with an ordinary telephone station 1 62 in 
. commutation with i ajocal tandem 489, connected to the P$TM.I24-.The initiating location request user could access the telephony 
interface cards SI2 via the hunt group SOO. In other embodiments, including various Inter-LATA Carriers 492, via the public 
switched telephone network (PSTN) 124. The hunt group interface SOO is in communication with a plurality of telepnone network 
interface cards 512, which are in communication with the location application 146 . The telephone interface cards 5 1 2 provide 
25 telephony channel associated signaling functions, such as pulse dialing and detection, automatic number identification, winking. 
' flash, off-hook voice synthesized answer, dual tone multi frequency (DTMF j detection, system intercept tones (i.e., busy, no-answer, 
out-of-service), disconnected, call progress, answer machine detection, text-to-speech and automatic speech recognition. Note that 
some of these functions may be implemented with associated digital signal processing cards connected to the network cards via an 
internal bus system. An assigned telephony interface card 508 detects the incoming call, provides an off-hook (answer signal) to 
30 the calling party, then provides, if appropriate, a text to speech (TTS) message indicating the nature of the call to me user, collects 
the automatic number identification information if available (or optionally prompts the caller for this information), then proceeds 
to collect the mobile identification number (HIM) to be located by sending a location request message to an application 146 in the 
location system 41 The mobile station M1N collection, provided through the communications channel established, is sent by the 
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initiating caller through keypad signaling tonesilhisHIN coHeaion process can be achieved in several methods. In one case the 
telephony interlace card 512 can request a text-to-speech Message, generated by a text-to-speech card 512, which prompts the 
initiator to key in the MIN number by keypad- tone signals. In another case an automatic speech recognition system can be used to 
collect the MIN digits. In either case after the M digits'have been collected, a location request message is sent to the location 
5 system 142. The location system 42 initiates a series of messages to the mobile switch center 112, via the location applications 
programming interface (L-API) 366, and optionally to the home location register 360, to determine whether or not the mobile 
- station 140 to be located can in fact be located. Alternatively the last known location can be provided, along with the time and date 
stamp of the last location, including an explanation that current location is not attainable. Conditions regarding the locateabiiity 
of an mobile station include, for example: mobile station 140 powered off, mobile station not in communication range, mobile 
10 station roaming state not known, mobile station 140 not provisioned for service, and related conditions. If the mobile station 140 
cannot be located then an appropriate error response message is provided to the initiating caller, via the service node for short 
messaging service 367. The service node is in communication with the location system 42 using a common text paging interface 
369. The service node 107 accepts the location text paging message from the location system 42 and communicates a request to 
page the initiating caller via a typical signaling system 7 fink for paging purposes, to the mobile switch center 112. The mobile 
15 switch center 1 12 forwards the location text page information to the initiating caller via the appropriate base stations 352 or 354, 
to the initiating mobile station 354. Otherwise the mobile station 140 is located using methods described in greater detail 
elsewhere in this patent. At a high level, the mobile switch center 112 is in communication with the appropriate base stations 352, 
354, and provides the location system 42 with the necessary signal and data results to enable a location estimation to be performed 
' by the location system 42. Once the location has been determined by the location system 42 in terms of Latitude, Longitude and 
20 optionally height if known (in the form of a text*string).*The tocatioh result' is provided by to the initiator by inputting the location 
text string to the service node for short 5 messaging service 367. The service node is in communication with the location system 42 
using a common text paging interlace 369. The service node 367 accepts the location text paging message from the location system 
^ 42 and communicates a request to page the initiating caller via a typical signaling system 7 link for paging purposes, to the mobile 
switch center 1 12. The mobile switch center 112 forwards the location text page information to the initiating caller via the 
25 appropriate-base stations 122a or 122b, to the initiating mobile station 140, via a text-to-speech card 512, in communication with 
the assigned telephone interface card 506. 

Referring to Fig. 39, a user (the initiating user) desiring the location of an mobile station 1 40, who has a push 
technology tuner 484 associated with the user's client workstation 484, selects the location channel in the area, and further 
specifies the mobile station(s) to be located, with what frequency should the location estimate be provided, and other related 
30 parameters, such as billing information. The user's client workstation 482 is in communication with the Internet, optionally via and 
encrypted communications channel using, for example, Netscape's SSL 3 encryption/decryption technology. A push transmitter 472, 
connected to the Internet 468 via a web server 464, detects the client workstation 482 user's request. The transmitter 472 requests 
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- ► • location update information for specified mpbikridenttfication numbers through a firewall 474 and a publisher 478. in 

communication with a location channel application^^ the location system 42. The location system 42 initiates location requests 
for all mobile station mobiWentificaiipn numbersior whichjocatidn information has been subscribed to, then provides the 
location results to the location channel appiication 42?. 
, 5 The location system 42 initiates a series of messageuo the mobik switch center 1 12, via the location applications 

programming interface (L-API) 136, and optionally to die home location register 460, to determine whether or not the mobile 
station 140 or others, to be located can in fan be located. Alternatively the last known location can be provided, along with the 
time and date stamp of the last location, including an explanation that current location is not attainable. Conditions regarding the 
locatability of an mobile station 140 include, fpr example: mobile station 140 powered off, mobile station not in communication 
10 . range, mobile station 140 roaming state not. known, mobile>station 140. not provisioned for service, and related conditions. If the 
, , mobile station 140 cannot be located.then an appropriate error response message is provided to the initiating client workstation. 

via the push technology components location channel application 429; publisher.478, firewall 474, transmitter 472, web server 464, 
public Internet 468, to the client workstation.482 .A similar communication mechanism is used to provide the subscribed-to client's 
.workstation 48^ t witli attained location' information^- - ,■■<'!• 
15 . . . . Note .that the location .channel could jn fact provide a coHeaion of mobilestation 140 mobile identification numben for 

■ location purposes , thatare grouped;by«a particular market and/orcustomer organization segment, for example, location channel 
, number I cquld provide enhanced wireless 9-1 -J service to : specific public safety answering points, channel number 2 could provide 
. . ^rwdic.wirele^ channel 
, 3 could provide^wire^ss Joqtiqn toa contra! center of a military organization, channel 4 could provide wireless location 
20 . informatipn ; of vehkleicarrying hazardous rpatenals, to a control; center; and so forth/ . • 

.... The ip^aiiop channel application 429 provides the location results to the publisher 478, which provides a method of 
, ir ; adding the new locatioa Results to the transmitter, via firewall 474. Thefirewall 474, provides proteaion services between certain 
. systems and the Iruernet, such as preventing maficiotjs users from accessing critical computing 

25 The group multicast help, with individualized directions, are those whose are authorized and nearest, with text paging 

message instructions on how to drive or navigate, to reach the initiating distress caller. Alternatively optional voice synthesis 
technology could be used to aid one or more members to have spoken instruction giving directions and/or instructions for each 
member, to help them reach the distress caller. 

Referring to fig. 40, an individual having a mobile station desires to make a distress call for help, or for some other 

30 reason. The distress calter with mobile station 102 dials a special telephone number, received by base station 104, which then sends 
the originating call setup request to the mobile switch center 1 08. The mobile switch center 1 08 routes the originating call through 
the PSTN 1 12 to an automatic all distributor (ACD) 116. TheACD 116 selects an available telephony interface circuit i 20, which 

71 

SUBSTITUTE SHEET (RULE 26) 

BNSDOCID: <WO 9810538A1 J_> 



WO 98/10531 




PCT/US97/15933 



answers the call and providing introductory information to the caller, such as a greeting message, progress of service, etc., using a 
voice synthesizer circuit card 124. Note that circuits 120 and 124 may be combined as voice response units. The telephony interface 
circuit 120 collects the automatic number identification information if available in the call setup message or optionally prompts the 
caller for this information. This MIN collection process can be achieved in several methods. In one case the network telephony 
5 interface card 120 can request a TTS message, generated by a voice synthesizer card 124, which prompts the initiator to key in their 
MIN number by keypad tone signals. In another case an automatic speech recognition system can be used to collect the MIN digits. 
In either case after the MIN digits have been collected, a location request message is sent to the location system 128. The location 
system or location system or center (LC) 128 initiates a series of messages to the mobile switch center 108, via the location 
applications programming interlace (L-AP1) 166, to determine whether or not the mobile station 102 to be located can in fact be 

10 located. If the mobile station 1 02 cannot be located then an appropriate error response message is provided to the initiating caller. 
Otherwise the LC 128 determines the caller's location via methods discussed elsewhere in this patent. While this event is proceeding 
an application in the LS 128 references the initiating caller's location subscriber profile database IS8 to determine if the caller 
allows others to locate him or her, and specifically which individuals are allowed to be informed of the caller's location. 

Assuming the caller allows location information to be sent out to a select group, then the list of members mobile station 

15 identification numbers (MIN)s are extracted from the profile database 158, arid an application in the LC 128 initiates a series of 
messages to the mobile switch center 108, via the location applications programming interface (L-API) 166, to determine the 
locations of each of the users' mobile station mobile identification numbers associated with the member list. Regarding those 
mobile station mobile identification numbers nearest the distress caller, each member mobile station is dialed via a control message 
sent from an application in the LC 128 to the telephony interface card 120. A voice synthesizer card 124 or text to soeech circuit is 

20 also patched in the ailing circuit path, to announce the purpose of the automated cali to each member. The ACO 1 1 6 initiates the 
call request to each member via the PSTN 112, which conneas to the mobile switch center 108, that ultimately rings the member 
mobile station 140 and 148 via base stations 132 and 1 52. An application in the LC 128 identifies a start and finish location 
destination location for a member, based on his/her current location as being the start location, and the finish location being the 
distress caller's location at mobile station MIN 102. The application in the LC 128 initiates a http or similar Internet compatible 

25 protocol universal resource locator (URL) request via the web server/client 162 to the public Internet 163, which terminates on a 
maps, directions web server 164. One such URL known to the authors is Lucent Technologies' hnp://www.mapsOnUs.com, which is 
provided for public use. The map/directions server 164 queries the map base 168 via a directions algorithm 170, and returns to the 
initiating http request, the location web server 162, with a list of instructions to enable a user to navigate between a start location 
and end location. Referring to Fig. 41, the information shown in the columns labeled "Turn #" t "Directions", "And Go", and/or 

30 "Total Miles", can then be parsed from the http response information. Referring now to Fig. FIG. 40, this information can then be 
sent asa short text message, to the relevant mobile station 148 or 140 via the service node 182, using interface 557 to the mobile 
switch center 108, and relevant base stations 152 and 132, assuming each member mobile station has short message service 
provisioned. If this is not the case, the service node 182 will inform the application within the LS 128, which then initiates an 
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alternative method of sending the start-finish location navigation mictions information via an appropriate voice synthesizer 
card 124 and associated telephony- interface card 120.,% interface. card 120 initiates an automated call to each approve 
amber's mobile .ianon 148 and 140. via the telepN W path inciudiag components ACD ! 1 6 in communication with the PSTN 112. 
which is in communicate wittnhe mobile Reenter .08. The mobile switch center 108 completes the routing of the automated 
S all to the appropnate mobile station .48 and 140 ring base stat,ons.l52 and 132 respectively. The above process is repeated for 
■ ■ each nearby member's mobile station, thus allowing all nearby members to be notified that the distress caller needs help, wuh 
navigation instructions to each member, which enables the member to reach the distressed caller. Variations of this apofinon 
include putting each relevant party in communion with each other via a conference call capability in the ACD 1 1 6. with or 
without providing location information and/or start-finish navigation instructions. 
,0 . ■ ■ An application in the tacatioasystem utilizes periodic wireless location ol appropriate rental cars, control circuits and 
control communications within. the, rental car. and secured transactions across the Internet, or similar mean, in order to provide 
various tracking and control functions. Such functions allow rental car agencies to remotely control and operate the, rental cars m 

■ ordertoreduceoper^ 

ar agency customers. • , , 

. |5 .. Referring to Fig. 42. a.vehkle 578 containing vanous sensors and actuators (not shown) used to. for example, lock and 

, ' u „, oc kar.dooas^ 

. . . brakes, electrical subsystems, sense the amount of various fluid levels. «u is in communicate with a vehicle-based local area 
network 572. which h in turn connected to a mobile smion lWcontaining asynchrbnous data communications capability. The 
- ^ ' vehkle-based local area netwoik may optionally contain a computer (not shown) for control and interiacing funaions. The mobile 
20 "' station 140 is always in communication, using the radio air interface with at least one base station 122g. and possibly other base 
"' sta t k,ns'l22h. The base stations ^ and *22h are in communication with the mobile switch center 1 12 via crampon facil.ties 178. 
"' ' The mobileswL center ! 12 is in communxation with the location system 142 and the public switched telephone network !2o v,a 
"mteroffi^ 

""' location system - mobile swttch center physical interlace itB^he physical interface provides two-way conneaions to the location 
25 applkates programming interface (L-AP1-MSC) 136. which is',n communication with a locate engine 139. which performs 
wireless toationestimationsforthe mobile nation, which is permanently mounted in the vehicle 578. The location engme 
" represents key components within the location system which together comprise thexapabiiity to perform wireless location 
esurnates;^ 

wireless location requests regarding the mobile station 140. as well as for reiving wireless location responses from the location 
30 engine 139. The application 146 is in communications with the automatic call distributor 546 for purpos« of initiating and 
receiving telephone calls to and from the public switch telephone network 126. via hum group interface 500. As one skilled in the 
art will appreciate, other interfaces (not shown) beyond hunt groups 500. can alternatively be used, such as ISDM interface circurts. 
T-carrier and the like. The application 146 is in communication with a web server and client 464, which in turn is in communicatron 
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with the Internet 468 via an Internet access interface 472. Ax those in the art will understand, an internet access interface is 
typically provided by an Internet service provider, also there are other methods which could be used to complete the Internet 
connection. The rental car agency contains a workstation or personal computer 582 with an Internet access interface 472 to the 
Internet 468. The application 146 requests of the location engine to perform a location request periodically regarding the mobile 
5 nation 140, with the location response information provided the web server and client, 464. for each rental car or vehicle 

containing a mobile station 140, the location, as well as various information about the rental car or vehicle can be ascertained via 
the above described infrastructure. 

An application in the location system operates in conjunction with an application in each public safety answering point 
(PSAP) that together provides various cafl handling functions to enable the PSAP to perform its work load efficiently and effectively 
10 toward unique emergency events unique to a given location. The application pair measures the number of emergency 9-1-1 wireless 
ails originating from a particular geographical area or location. Upon exceeding a provisional threshold value T\ the application 
pair traps the next incoming call from the same location and provides a call screening function via a play announcement and collect 
digits activity. This activity alerts the originating caller that if their call relates to an incident at a particular location, then they are 
the "X + 1 th" caller who has already notified the PSAP, and that no further caller discussion is required. However, if the caller's 
1 5 intent does not relate to the incident described above, then the caller is requested to press or say "one", or some similar keypad 
number, which then is collected and causes the caller to be re-routed to the next available PSAP call taker. Alternatively if the 
originating caller does not respond within a short time period, then the call is also re-routed to the next available PSAP call taker. 
The voice announcement may either be synthesized by a text-to-speech card, or an PSAP operator may store a voice message which 
describes the incident at the above-referenced location. 
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Patent Claims 

We claim: 

1. An apparatus for locating a lint mobile station for at least transmitting and receiving radio signals, wherein said radio 

signals ar e received on a forward radio bandwidth and said radio signals are transmitted on a different reverse radio 
bandwidth, comprising: 

a first wireless network inf rastructure for communicating with said first mobile station, said first wireless 
network infrastructure having: 

(Al) a plurality of spaced apart base stations for communicating via said radio signals with said first 
mobile station, and 

(A2) a mobile switching center for communicating with said first mobile station, via said radio signals 
with the base stations, wherein said mobile switching center also communicates with said 
plurality of base stations for receiving measurements of said radio signals, said measurements 
including: (i) first measurements of said radio signals received by said first mobile station in said 
forward radio bandwidth, and (ii) second measurements of said radio signals transmitted by said 
first mobile station in said reverse radio bandwidth; 
a location determining means for locating said first mobile station, wherein said location determining means 
receives said first and second measurements from the mobile switching center for estimating a location of said first 
mobile station, wherein said estimate is a funaion of both said first measurements and said second measurements. 

2. An apparatus for locating a mobile station as claimed in Claim I, further including an interface means between said 

location determining means and said mobile switching center, wherein said interface means generates a location 
request for a primary one of said base stations to which said first mobile signaling means is in communication. 

3. An apparatus for locating a mobile station as claimed in Claim I, further including a means for requesting data related 

to additional radio signals between said first mobile station and at least a second wireless network infrastructure 
different from said first wireless network inf rastructure. 

4. An apparatus for locating a mobile station as claimed in Claim I, wherein said first wireless network infrastructure is 

capable of communicating at least one of voice and visual information with said first mobile station. 

5. An apparatus for locating a mobile station, comprising: 

a wireless network inf rastructure for communicating with a plurality of mobile stations, each said mobile 
station for transmitting and receiving wireless signals, wherein said wireless signals are received in a forward 
bandwidth and said wireless signals are transmitted in a different reverse bandwidth, and, said wireless network 
infrastructure having a plurality of spaced apart base stations for communicating via said wireless signals with said 
plurality of mobile stations; 
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a location determining means for communicating with said plurality of mobile stations, via said radio signals 
with the base stations, wherein said location determining means communicates with said plurality of oase stations 
for receiving measurements related to said radio.signals for estimating a location of at least a first of said plurality 
of mobile stations, said measurements including: (i) first measurements of said wireless signals received by said first 
mobile station in said forward radio bandwidth, and (ii) second measurements of said wireless signals transmitted 
by said first mobile station in said reverse radio bandwidth; 

wherein said location determining means estimates a location of said first mobile station using both said first 
measurements and said second measurements. 

6. An apparatus for locating a mobile station as claimed in Claim 5, wherein said second measurements are determined 

from said wireless signals being received by said base stations. 

7. An apparatus for locating a mobile station as claimed in Claim 5, wherein said measurements include at least one of; a 

delay spread, a signal strength, a ratio of energy per bit versus signal to noise, a word error rate, a frame error rate, 
a mobile signaling means, a power control value, a pilot index, a finger identification, an arrival time, an 
identification of said first mobile station for communicating with the wireless nerwork infrastructure, a make of said 
first mobile station, a revision of said first mobile station, a sector identification of one of the base stations receiving 
said radio signals transmitted from said first mobile station: 

8. An apparatus for locating a mobile station as claimed in Claim 5, wherein said radio signals are communicated using 

one of: CDMA, W-CDMA JDMA and advanced* mobile phone service. 

9. An apparatus for locating a mobile station as claimed in Claim 5, wherein said location determining means includes a 

location estimator using time difference of arrival data from said measurements. 

10. An apparatus for locating a mobile station as claimed in Claim 9, wherein said location estimator receives said 
measurements from a distributed antenna system. 

1 1. An apparatus for tecating-a mobile station as claimed in Claim 9, wherein said location estimator receives active, 

candidate and remaining set information from said first mobile signaling means. 

12. An apparatus for looting a mobile station as claimed in Claim I, wherein said location determining means includes: 

a receiving means for receiving first data related to at least one of said first measurements and said second 
measurements between said first mobile station and said wireless network infrastructure; 
activating a first location estimator for outputting a first estimate of a location of said first mobile station when 
supplied with location information from said receiving means, said location information related to the first data; 
outputting said first estimate of the location of said first mobile station when said first estimate has an extent less 
than or equal to a predetermined size; 

activating a second location estimator for outputting a second estimate of a location of said first mobile station 
when said first location estimator does not provide said first estimate having an extent less than or equal to a 
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predetermined size; f ; / ,... tf - • ' 
■ outputting an estimate of the location of said first mobile station when said second location estimator provides said 
• second^estimate. • 

11: A method for locating a wireless mobile station, comprising: transmitting, by a first short range transceiver station, a 
5 • status change related to whether the mobile station and said first short range transceiver station are able to 

wirelessiy communicate through a. telephony network to a predetermined storage; storing, in said predetermined 
storage* said statusof a mobile.station, wherein said status has a first value when the mobile station communicates 
with said short raflge transceiver station as a cordless telephone, and said status has a second value when the mobile 
station communicates with a. network of' base" stations, wherein said base stations are cooperatively linked for 
10 providing wireless communication;>detecting; by said first short range transceiver station, a change accessing said 

predetermined storage for determining a location of the mobile station, 
v J4. A method for, locating a wireless mobile Ration, as claime^in Claim 13, wherein said short range transceiver is a home 
, : , j - . • :;base'Station; - . y\. ■<: ■> 

■ • . 15. Amethod foriocating a wireless mobile station, as cjaimed.in Claim I J, wherein said predetermined storage is 
15. .. . accessible via.one ofr.an autonomous notification message and a request-response message. 

16. A method for locating* wirekess mobile station, as claimed in Claim 13, wherein said predetermined storage is a home 

- location register. >, * .■ - 

: !7:vA method forbcatinglwireless mbl)ilesutibn,/as claimed in Claim 13, wherein said predetermined storage includes 
oneor more of the fotlowing data items Telated to-said mobile station: mobile station identification number, short 
20 ' orange* transceiver identification and mobile, switch center identification. 

18: A method for locating a wireless: mobile station, as claimed in Claim 13, wherein said step of accessing includes 
responding to a query.-of said predetermined storage location using an identification of the mobile station. 
:■•■>.■: r.. '19: Amethod jorJoQt^ in Claim 13, further including providing said status from 

, ; said predetermined storage together with an identification of the mobile station to a mobile station iocation 
25 estimatorfor estimating a location of, the mobile, station. . 

20. A method for location a wireiejsmobile station,* as claimed in claim 17, wherein said step of transmitting further 
includes associating said change with a predetermined fixed location and said short range transceiver identification. 
. 21. A method for location a wireless mobile station, as claimed in claim 13, wherein said step of accessing includes 
translating the mobile identification number and said short range transceiver identification into a predetermined 
30 : location when the status has said first predetermined value. 

22. A method for location a wireless mobile station, as claimed in claim 13, further including a prior step of provisioning a 
translating database from a customer care system containing the location of the short range transceiver. 

23. A method for locating a wireless mobile station, comprising: receiving data of wireless signals communicated between 
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a mobile station ahdWireless network; detecting, using said first data, that the mobile station is in wireless 
' communication with a distributed antenna system having a plurality of antennas connected in series and distributed 
along a signal conducting line so that there is a predetermined signal time delay between said antennas and at 
predetermined locations; determining a plurality of signal time delay measurements for signals transmitted between 
5 the mobile station and a collection of some of said antennas, wherein said signals are also communicated through 

said line; estimating a location of the mobile station using said plurality of signal time delay measurements. 
24. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of estimating includes 
correlating each measurement of said plurality of signal time delay measurements with a unique corresponding one 
of said antennas. 

10 25: A method for locating a wireless mobile station as claimed in Claim 24, wherein said step of estimating includes: 

identifying a plurality of antennas in said collection using correlation obtained in said step of correlating; 
' determining a corresponding signal time delay between the mobile station and each antenna in said collection; 
determining a location of each antenna in said collection; estimating a location of the mobile station using said 
corresponding signal time delays and said locations of each antenna in said collection. 

IS 26. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of estimating includes 

determining, for said signal time delay measurements, a common signal time delay corresponding to transmitting 
signals from said distributed antenna system to a receiver of the first wireless network. 
27. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of estimating includes using 
an absolute delay time with respect to a pilot channel for a base station on the wireless network. 

20 ' 28. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of estimating includes 

performing a triangulation using values related to one of: a signal time of arrival, and a signal time difference of 
arrival for time difference of arrival corresponding to each antenna in said collection. 
29. A method for locating a wireless mobile station, as claimed in Claim 23 wherein said step of estimating includes a step 
of computing a most likely location of said mobile station using a fuzzy logic computation. 

25 30. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of activating includes 

activating one of: 

(a) a location estimator for determining whether the mobile station is detected by a base station of the 
network, wherein said base station communicates with the mobile station as a cordless telephone; 

(bj a location estimator for estimating a location of the mobile station using location information obtained 
30 from said distributed antenna system; 

(c) a location estimator for estimating a location of the mobile station by one of: triangulation and 
trilateratton. 

3 1 . A method for locating a wireless mobile station, comprising: first receiving first signal characteristic measurements of 
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wireless,signals communicated between a mobile station and a lint network ol base stations, wherein said base 
. stations in.the first network are cooperatively linked by a first wireless service provider (or providing wireless 
, .communica.tion;.innructi(.g the mobile station to search for a wireless signal from a second network of base stations 
.. that are cooperatively linked bya second wireless service provider lor providing wireless communication, wherein 
5 ■ ... said first and second wireless service providers are diflerent; second receiving second signal characteristic 

measurements of wireless signals communicated between the mobile station and said second network of base 
. . ■ , stations; estimating a locatiq^f the mobile station using said first and second signal characteristic measurements. 

, . -32. A method for locating a wireless mobile station as claimed in Claim 31. wherein the mobile station is registered lor a 
wireless communication service with thefirst wireless service provider, and the mobile station is not registered for 
10 the wireless communicatioji.service with the second. wireless service provider. 

33. A method for-lqating a. wireless mobile station as claimed in Claim 3 1, wherein said step of instructing includes 
transmitting a command to the mobile statiqnfor instruaing the mobile station to search lor a signal from a base 
station.of said second wireless service provider in a frequency bandwidth different from a frequency bandwidth for 
........ . . communicating with the base.stations.of.said first wireless service provider. 

.IS , . . ; ■ 34- method forJpcating a wireless mobile station as claimed in Claim 3i. wherein said stepjjf instruaing includes 

. .„. ,transmin,ing.aco.mmand.to the mobile sution for instructing the mobile station to hand-off from said first service 
, ./provider to a base,statton associated with said second service provider, lor purposes of performing additional signal 

. ...... . /measurements. , ; i;.; f ~ ,,,, „ ta . .. _ „■• • • 

:. - : ..„ -.■ , 35/ A method Ipr looting^ wireless mobile station as claimed in Claim 3 1 . wherein said first signal characteristic 
,,20 . h >■ ^.measurements include .measurements for time delay, signal strength pairs of signal communicated from at least one 

. , , ., . ,(a) the base stations of f jaid firs; ; network to.the mobile station, and 

, „ ||>.) the. iaofcfc,st^,Wttetase ttabnspl said fire network, and 

, . 4 „-j»here».s»J.secoqd signal Chandra* measurements include measurements tor time deby, signal strength pairs 
2s of signals communicated from the base stations ol said second networkto the mobile sution. 

36. A method for locating a wireless mobile station, comprising: receiving first data related to wireless signals 

- . , .; communiated between a.mobile station and at least a first network of a plurality of commercial mobile service 

provider networks of base stations, wherein for each said network, there is a plurality of base stations for at least 
.. one of transmitting and receiving wireless signals with a plurality of mobile stations; instruaing the mobile station 

30 to communicate with a second network of the plurality ol networks for supplying second data; aaivating a mobile 

station location estimator, when said first and second data are obtained for providing an estimate ol a location of 
the mobile station. 

37. A method for looting a wireless mobile station, as claimed in Claim 36, wherein said second network includes a 
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second plurality of base stations; wherein a majority of base stations in said second plurality of base stations has a 
location different from the locations of base stations in said first network. 

38. A method for locating a wireless'mobile station, as claimed in Claim 36, wherein at least one of said first and second 
data includes signal characteristic measurements of communication with the mobile station for a time interval of less 
than 10 seconds. 

39. A method for locating a wireless mobile station/comprising: first receiving first signal characteristic measurements of 
wireless signals communicated between a mobile station and a first network of base stations, wherein said base 
stations in the first network are cooperatively linked by a first wireless service provider for providing wireless 
communication; instructing a second network of base stations that are cooperatively linked by a second wireless 
service provider for providing wireless communication so that the second network searches for wireless signals from 
the mobile station, wherein said first and second wireless service providers are different; second receiving second 
signal characteristic measurements of wireless signals communicated between the mobile station and said second 
network of base stations; estimating a location of the mobile station using said first and second signal characteristic 
measurements. 

40. A method for locating a wireless mobile station, as claimed in Claim 39, further including a step of requesting the 
mobile station to raise it's transmitter power level to a predetermined level, prior to said step of instructing. 

41. A method for looting a wireless mobile station, comprising: receiving, by a receiving means, first data related to 
wireiesssignals communicated between a mobile station and at least a first network of a plurality of commercial 
mobile service provider networks, wherein for each said network, there are a plurality of communication stations for 
at least one of transmitting and receiving wireless signals 1 with a plurality of mobile stations; first activating a 
location estimator for providing a first estimate of a location of the mobile station when supplied with first location 
information from said receiving means, said first location information related to the first data; 

when one of: (a) said first estimate does not exist, and (b) said first estimate has an extent greater than or equal to 
a predetermined size, the steps (Ai) and (A2) are performed: 

(Al) instructing the mobile station to communicate with a second network of the plurality of networks for supplying 

second data to said receiving means, wherein said second data is related to wireless signals communicated 

between the mobile station and the second network; 
(A2) second activating said location estimator a second time for providing a second estimate of a location of the 

mobile station when supplied with additional location information from said receiving means, said additional 

location information related to the second data; 
outputting at least one of the estimates of the location of the mobile station provided by said location estimator 
when said location estimator provides at least one estimate of the location of the mobile station. 

42. A method for locating a wireless mobile station as claimed in Claim 41, wherein said additional location information 
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and said firsclocation .ufcrraqjojh?* utiliied together.by said location estimator. 
, 43. Amethpd pi locating a wireless mobile ; station as claimed in Claim 41. wherein said communication stations include 
. wireless base statioijs^for one of : CDMA; TDMA, and GSM. 
.44. A.method o( locating a wireless, mobile.station as claimed in Claim 43, wherein said communication stations include 
S home base stations. 

. 45. A method pi locating a wireless mobile station as claimed in Claim4 1, wherein the mobile station includes one of: a 

. . CDMA transmittejr.a TOMA transmitter, and a GSM transmitter, and a AMPS transmitter. 

46. A method lor locating a wireless mobile ; station as claimed in Claim 41, wherein one or more of said activating steps 
. . , includes: .... .. . , 

10 ( a ) aid location estimator for determining whether the mobile station is detected by a communication station 

which communicates with the mobile station as a cordless telephone; 

(b) said location estimator for estimating i location of the mobile station using location information related 
. ..to data from a distributed antenna system: . , 

(c) said location estimator for estimating a location^ the mobile station by one ol: triangulation and 
IS • . . - uilateration. , ; ,, r 

...... . . ..,; : 47.. A.method for locating a wireless. mobile sution as claimed in Claim 41, wherein said predetermined extent is less than 

... ... .. one thousand.feet.. . ,. . . 

. " _ 4$. A method, (or looting a^irelejsfotok. statjon, comprising: receiving, by a receiving means, first data related to 

wirelejs signals cornrnunkated between a mobile station and at least a first network of one or more commercial 
JO... ... .. .. ,. , ,. mpbile service provtder. mtworks, wherein said network, there is a different plurality of base stations for at 

, . , least one of transmitting and receiving wireless signals with a plurality of mobile stations; activating a f irst location 
; . .esfimator foroutputting a first estimate of a location of the mobile station when supplied with location information 
from jaid /ecemng mans, said location information related to the first data; outpuning said first estimate of the 
, location of the mobile station when said first estimate has an extent less than or equal to a predetermined site; 
25 activating a second kxat'pn estimator for outputting a second estimate of a location of the mobile station when said 

first location estimator does not provide aid first estimate having an extent less than or equal to a predetermined 
size; outpuning an estimate of the location ol the mobile station when said second location estimator provides said 
second estimate. . 

49. A method for locating a wireless mobile, station as claimed in Claim 48 further including a step of instructing the 

30 mobile station to communicate with a second network of the plurality of networks for supplying second data to aid 

receiving means, wherein said second data is related to wireless signals communicated between the mobile station 
and the second network,. . 

50. A method for locating a wireless mobile station as claimed in Claim 49, wherein said step of instructing includes a 
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step of instructing the mobile stitton to hand-off to said second network for synchronizing timing signals and 
performing measurements between the mobile station an said second network. 
51. A method for locating a wireless mobile station as claimed in Claim 48, wherein one or more of said activating steps 
includes actuating one of: 

(a) a location estimator for determining whether the mobile station is detected by one of the base stations 

which communicates with the mobile station as a cordless telephone; 

(b) a location estimator for estimating a location of the mobile station using location information related to 

data from a distributed antenna system; 

(c) a location estimator for estimating a location of the mobile station by one of: triangulation and 



52. A method for locating a mobile station, comprising: receiving, by said mobile station, a request control message from 
one of a plurality of base stations, wherein said message is received by a receiving antenna of said mobile station; 
the control message providing information related to said message to at least one of a control processorand a 
searcher receiver in said mobile station; determining, using at least one of said control processor and said searcher 
receiver, a plurality of pairs of radio signal strength related values and corresponding signal time delays for a 
wireless communication between said mobile station and at least a first of the base stations, wherein for at least 
some of said pairs, said signal time delays are different, and for each pair, said signal strength related value for said 
pair is obtained using a signal strength of said communication at said corresponding signal time delay of said pair; 
transmitting signals for said pain to one or mere of the base stations via a transmitting antenna of said mobile 
station;' routing data for at least one of said pairs from said one or more base stations to a mobile station location 
estimator for estimating a location of said mobile station. 

53. A method for locating a mobile station, as claimed in Claim 52, wherein said step of receiving uses one of a CDMA, an 
AMPS, a NAHPS and a TDMA wireless standard. 

54. A method for locating a mobile station, as Claimed in Claim 52, wherein said step of determining is performed for a 
wireless communication between said mobile station and each of a plurality of the base stations. 

55. A method for locating a mobile station, as claimed in Claim 52, wherein each of said signal time delays is included 
within a predetermined corresponding time delay spread. 

56. A method for locating a mobile station, as claimed in Claim 52, wherein said step of determining includes a step of 
instructing, by said control processor, said searcher receiver to output a plurality of said radio signal strength 
related values for a plurality of fingers resulting from said communication from said first base station to said mobile 
station. 

57. A method for locating a mobile station, as claimed in Claim 52, wherein said step of determining includes inputting 
data for said pairs to a modulator for modulating said data prior to said step of transmitting. 



trilateratton. 
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58. A method foi; Jpating^rnobile station,- as claimed in Claim 57, (under including a step of establishing a software 
- controllable data connection between said control processor and a mobile station component including at least one 
. of: a user digital baseband component and said modulator, wherein said connenion inputs said data to said 
component. 

5 t 59. A method for locating a mobile nation, as claimed in Claim 52 further including a step of providing said data for said 

., pairs to a mobile station location estimating system having a first mobile station location estimating component 
. < , . ■ • • using time difference of arrival measurements for locating said mobile station via one of triiateration and 
triangulation. . : • 
. 60. A method for locating a mobile station, as claimed in Claim 59, wherein said step of providing includes selecting one 
10 of: said first mobile station estimating component, a second mobile station estimating component using data 

obtained from a distributed antenna system, and a third mobile station estimating component for using data 
, v. ; . obtained. from activ?.tipn of a home . base station. , > . 

. 6L A method for locating a mobile station, as claimed in Claim 60, further including a step of computing a most likely 
r is ., location of said mobile station using a fuzzy logic computation. 
15 ... ,62. A method for locating^ mobile station, as claimed in Claim 61, wherein said step of computing is performed by said 
. . : ; second mobile station jejtimating component for determining a most likely floor that said mobile station resides in a 

■ -i multi-story,buiM^ 

....;*■:■;■ .^rtA.nKthodforloating ^))ife.statiprH,as claimed in Claim 59, further including a step of requesting data for 
> ; . , : ; . additional pairs of radio signal strength related values, and corresponding signal time delays for a wireless 

, ^ .communication, betw^fl v utd m^ite.station and at least a second base station of a commercial mobile radio service 
provider different from a commercial mobile service, provider for said first base station. 
. ; - H ^method for obtaining data related to wireless signal charaaeristics, comprising: providing a user with a mobile 
station for use when.:the-usef traversesa route.having one or more predetermined route locations, wherein one or 
mqre of the route tocatipos have a corresponding telephone number and a corresponding description stored in the 
25 mobile station; performing the following ;ubsteps when the user visits each of the route locations: activating a call to 

said corresponding telephone number^transmitting a code identifying the route location when the user is 
substantially at the route location; storing an association of: 

(a) signal characteristic measurements for wireless communication between the mobile station 
and one or more base stations, and 
30 ,, . (b) a unique identifier for. the route location obtained using said code transmitted by said call; 

Wherein said stored signal characteristic measurements are accessible using said unique 

identifier. 

65. A method as claimed in Claim 64, wherein said unique identifier corresponds to one of: (a) an address for the route 

83 

SUBSTITUTE SHEET (RULE 26) 



20 



BNSDOCIO: <WO 9810538A1 J_> 




PCIYUS97/15933 



location, and (b) a latitude and longitude of the route location. 

66. A method as claimed in Claim 64, wherein said route is periodically traversed by a user having a mobiie station for 
accomplishing said step of performing. 

67. A method as claimed in Claim 64, wherein said step of storing includes retaining said signal characteristic 
measurements in a data storage for analyzing signal characteristic measurements of wireless communications 
between mobile stations and a wireless infrastructure of base stations. 

68. A method as claimed in Claim 64, further including, prior to said step of activating, a step of determining, by the 
user, that a display on the mobile station uniquely identifies that said corresponding description of the route 
location is available for calling said corresponding telephone number and transmitting said identifying code. 

69. A method as claimed in Claim 64, wherein said step of storing includes: obtaining a phone number identifying the 
mobile station; providing said phone number identifying the mobile station to a commercial mobile radio service 
' provider in a request for said signal characteristic measurements. 

70. A method as claimed in Claim 64, wherein said step of storing includes using a phone number identifying the mobile 
station in combination with said transmitted identifying code for determining said unique identifier. 

71. A method as claimed in Claim 64; wherein said corresponding description includes at least one of: a textual 
description of its corresponding route location, and an address of its corresponding route location. 

72. A method as claimed in Claim 64, further including steps of: associating said identifying code for the route location 
and said unique identifier in a data storage prior to performing said step of performing; accessing said data storage 
using said identifying code for obtaining said unique identifier in said step of storing. 

" 73. A method as claimed in Claim 64; further including a step of accessing said stored signal characteristic measurements 
for enhancing a performance of a process for locating mobile stations. 

74. A method as claimed in Claim 64; wherein at least two of said one or more base stations are in networks of different 
commercial mobile radio'service provider* * 

75. A method as claimed in Claim 64, further including a step of filtering said signal characteristic measurements so that 
when said signal characteristic measurements are suspected of being transmitted from a location substantially 
different from ti« route location, said step of storing is one of: (a) not performed, and (b) performed so as to 
indicate that said signal characteristic measurements are suspect. 

76. A method as claimed in Claim 75, wherein said step of filtering includes at least one of: (a) determining an amount by 
which an estimated location of the mobiie station using said signal characteristic measurements differs from a 
location of the mobile station obtained from said unique identifier; (b) determining whether a predetermined 
amount of time has elapsed between successive performances of said step of activating. 

77. A method for locating a wireless mobile station, comprising: 

first receiving first signal characteristic measurements of wireless signals communicated between a mobile station 
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and a first networks basesutions, wherein said tint signal characteristic measurements includes: 
• . •(a)one.ormorepairs..ofwireies,ssignal strength related values and corresponding signal time delays for a 
wireless communication between the mobile station and at least a first of the base stations; 
• . .. <b>data Mientifyingor^^tionalcharactenstics ol the mobile station including information related to a signal 

,-■ transmission powy.fprthe-mobilestatron and information for determw 
■ .' ' power level of the. mobile station; 
■ ' adjusting, for at least one of said pairs, its corresponding wireless signal strength, using said data, thereby obtaining 
. corresponding adjusted pain, wherein each adjusted pair has the corresponding adjusted signal strength, and 

wherein said adjusted signal strength is an expected signal strength of a predetermined standardized mobile station 
transmitter power level having-a predetermined maximum transmission power and operating at a predetermined 
transmission power 

outputting secondsigial characteristic information, obtained using said adjusted signal strength, to a mobile station 
location estimator for determining a location estimate of said first mobile station. 
• 78. A method (or locating a : mobile station as claimed i ; n Claim 77, further including applying sequence of one or more 
r. signal processing fikersto one of: said pairs and said adjusted pairs. 

- 79. A^ethod Jor locating a mobile station asdaimed in paim 78, wherein said sequence of filters is dependent upon a 
' ■ ; ; <orresponding mobile station tocation estimator.s . 

■: wfiw Md-secondfiltea0( : s9id »qu«we. 3«flWWft.«»/ r,rst r,tar " aB '"P" 1 10 aid * c * nd fiter - 
20 v . : - , ai. A method for tooting a mobtestttioaasjlaimed^n Claim 79, wherein said filters include Sobel. Werner, median and 

^' ^v^mettaM 

first reawng-fintsigiaUharacterist^ between a mobile station 

• . and a first networlc of base nations, wherein said first signal characteristic measurements includes one or more pairs 
2S of wireless signal strength related yalues and corresponding signal time delays for a wireless communication between 

the mobile station and at least a first of the base stations; 

categorizing said pairs into categories according to ranges of signal strength related values and ranges of 
.■• corresponding signal time delays (orobaininga representation of a frequency of occurrence of said one or more 
pairs in said categories; 

30 applying one or mont;firters.tp said representation for one of: (a) reducing characteristics of said representation that 

are expected to be. insufficieptly repeatable for use in identrfying a location of the mobile station, and (b) enhancing 
a signal to noise ratio; 

supplying an output obtained from said step of applying to a mobile station location estimator; 
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estimating a location of the mobile station using said mobile station location estimator. 

83. A method for locating a wireless mobile station as claimed in Claim 82, further including a step of requesting data for 

additional pain of wireless signal strength related values and corresponding signal time delays for a wireless 
transmission between the mobile station and at least a second base station of a second network of base stations 
different from the base stations of the first network, wherein said first and second networks communicate with the 
mobile station in different signal bandwidths. 

84. A method for looting a wireless rnobile station as claimed in Claim 83. wherein the first network is operated by a first 
commercial mobile radio service provider and the second network is operated by a second commercial mobile radio 
service provider. 

85. A method for locating a wireless mobile station as claimed in Claim 82, wherein said representation corresponds to a 

histogram. 

86. A method for locating a wireless mobile station as claimed in Claim 82, further including a step of normalizing one of: 

(a) said pairs, and (b) values corresponding to said output. 

87. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of activating further includes 

the step of applying a fuzzy logic module which further discretizes the location estimate provided from one of: 

(a) a location estimator for estimating a location of the mobile station using location information obtained 

from said distributed antenna system; 

(b) a location estimator for estimating a location of the mobile station by one of: triangulation and 

trilateration. 

88. A method for contacting a telephony station, comprising: associating, by a user, a particular telephony number with a 

collection of one or more telephony station numbers of telephony stations with which the user desires to 
communicate when said particular telephony number is called from a predetermined telephony station; receiving 
said particular telephony number from the predetermined telephony station; determining a location of said 
predetermined telephony station and at least some of said telephony stations having telephony station numbers in 
said collection; selecting a first of said telephony stations having telephony station numbers in said collection, 
wherein said first telephony station is selected according to a location of said predetermined telephony station and a 
location of first telephony station; transmiting a user desired message to said first telephony station. 

89. A method for locatin a mobile station, comprising: establishing, by a user of a particular mobile station, a collection of 

identities of one or more persons having permission to receive a location of said particular mobile station; receiving 
a request by a first of said persons for locating said particular mobile station; determining a location of said 
particular mobile station in response to said request, said location determined using measurements of wireless 
transmissions between said particular mobile station and a first wireless network of base stations, wherein said base 
stations are cooperatively linked for wireless communication; outputting said location to the first person. 
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90. A methodas cla[nw) in CiajmB?, wherein; said step of determining includes using measurements of wireless 

tramsmissiw mobile, station and a second wireless network of base stations provided by a 

. , .different,com^ercial wireless service provider from a commercial wireless service provider for the first wireless 
. . ^network.. ■ 
S . 91,. A,n apparatus for locating a mobile.station as.claimedjn Claim 3, further including a means for providing a location 

estimate using the Internet. r 

.92. An apparatus for locating a mobile station as claimed in Claim 3, further including a means for providing a location 
estimate using the Internet. , . ■ . 

93. An apparatus for locating a mobile station a$ claimed in Claim 3. further including a means for providing a location 
10 estimate using digital certificate keys and the Internet. : 

94. An apparatus for locating a mobile station as claimed jn Claim 91, further including a means for providing a location 
., , .. estimate using push technology on the. internet. ; . v , . . 
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FIG. 8: DA Installation Procedure for Wireless Location 
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FIG. 15: CDMA Mobile Station Prior Art 
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FIG. 16: MS Modification for RF Signal Telemetry 
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Figure 17: Location and a Home Base Station 
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Fig. 19: MS at location A, detects BSs 1b, 5c, 2c and 4a 
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Fig. 20: MS at location B, detects BSs 1b and 2a 




Fig. 21: MS at location C, detects only BS 1a 
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AMENDED CLAIMS 

[received by the International Bureau on 3 April 1998 (03.04.98); 
original claims 1-94 replaced by amended claims 1-79 (24 pages)] 

1. A method for locating a wireless mobile station in an 
area, wherein the area is included in a first area for a first 
network, and a second area for a second network, wherein: 

the first network has a first collection of one or more 
base station controllers, wherein each of the base station 
controllers control communications with a corresponding 
predetermined plurality of geographically dispersed base 
stations of the first network, wherein each base station 
controller of said first collection has access to operating 
characteristics of mobile stations registered with the first 
network for subscribing to a first wireless service offered by 
the first network, 

the second network has a second collection of one or more 
base station controllers, wherein each of the base station 
controllers in the second collection control communications 
with a corresponding predetermined plurality of geographically 
dispersed base stations of the second network, said second 
collection operably disjoint from said first collection, 
wherein each base station controller of said second collection 
has a more restricted access to at least one operating 
characteristic of mobile stations: (i) registered with the 
first network, and Ui) not registered with the second network 
for subscribing to a wireless service offered ..by the second- 
network, 

comprising: 

receiving ■ first data related to wireless signals 
communicated between a particular mobile station in the area 
and the first network, wherein said particular mobile station 
is registered with the first networks- 
first activating first location estimator for providing a 
first estimate of a location of the mobile station, wherein 
said first location estimator is supplied with first location 
information for deriving said first estimate, said first 
location information at least partially derived from the first 
data, said location information capable of ■ changing with a 
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change in a location of- .said particular mobile station; 

determining, from at least 'one of said first location 
information and said first estimate, a subset of one or more 
base station transceivers 'of the second network, wherein said 
subset is expected to include one or more base station 
transceivers: 

(Al) detected by said particular mobile station, and 
(A2) that detects said particular mobile station; 

providing the second network with said at least one 
operating characteristic of said particular mobile station 
obtained from the first network; 

obtaining, in response to said step of providing, 
additional location information derived at least partially 
from communications between said particular mobile station and 
said subset of transceivers related to wireless signals 
communicated between said particular mobile station and said 
subset of transceivers; 

second. activating a second location estimator for providing 
a second estimate of a location ; of • said particular mobile 
station, wherein said second location estimator is supplied 
with said additional location information; and 

.outputting at least one of the first, and second estimates 
of the location of the mobile station as an estimate of the 
location of said particular mobile station. 



2. A method as claimed in Claim 1, wherein said step of 
providing includes a prior step of populating a database with 
mobile station provisioning data, received from a customer 
care system used by said second network. 



A method for locating a particular wireless mobile 
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station during- a- *- wireless- communication for an emergency 
response, wherein an area about said particular mobile station 
is included in a. first area for a -first wireless network, and 
in a second,., area,, for a second wireless network, said 
particular mobile station registered with the first network 
for subscribing to a wireless service, wherein for each 
network of said first and second networks, the network 
includes a collection of one or more mobile switching centers, 
each of the mobile switching centers controlling 
communications with a corresponding predetermined plurality of 
geographically ■ dispersed base stations of the network, and 
each mobile switching center of ■ said collection": 

(al) having access to predetermined identification 
'information for identifying each mobile station registered 
with the network, said identifying information being 
accessible by the mobile switching center independently of a 
communication between the registered .mobile station and the 
mobile switching center, and 

(a2) does not have independent access to said 
.identification- information for" mobile stations not registered 
with Othfe-- network,' • ■■■ ' 
. . comprising : ; ' 

first receiving, during said emergency response 
communication, first' data including: (bl)' said predetermined 
identification information for identifying said particular 
mobile station, and ; (b2) location related data obtained from 
wireless signals communicated between said particular mobile 
station and the first network, wherein said location data, is 
capable of changing when said particular mobile station 
changes location; 

selecting the second network as a different wireless 
network for obtaining additional location related data 
obtained from wireless signals communicated between said 
particular mobile station and the second networks- 
second receiving said additional location related data; 
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determining a -location, estimate of said particular mobile 
station using one or more- of .said location related data and 
said additional location related data; 

outputting a. location estimate of said particular mobile 
station, wherein said location estimate is derived using said 
one or more estimates. 

4. A method as claimed In Claim 3, wherein one or more of 
said steps of selecting, second receiving, activating and 
outputting occur during said emergency response communication. 

5. A method as claimed in Claim 3, wherein said step of 
outputting includes a step of transmitting said at least one 
location estimator to a Public .Safety Answering Point. 

6. A. method as claimed: in Claim 3, wherein said particular 
mobile station is not registered with said second wireless 
network. 

7. method as claimed in Claim. 3, further- including a step 
of requesting that said particular mobile station scan for 
detecting signals .transmitted by base • station transceivers of 
the second network. 

8. method as claimed in Claim 7, wherein said step of 
requesting includes providing a transmission to the first 
network, wherein said transmission instructs said particular 
mobile station to perform a scan for detecting signals 
transmitted by base station transceivers of the second 
network . 

9. Method as claimed in Claim 8, wherein said step of 
receiving includes determining, a base station transceiver 
identification of a base station transceiver from the second 

network. 
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, 10. A method as ■ ciai-med' in 'Claira 9, wherein said location 

related data includes' an identification of first set of one or 
more base station ■ transceivers of the first network such that 

_, _ for each said transceiver at least one of: (a) it detects said 
particular mobile station, and (b) it is detected by said 
particular mobile station; and' 

11- A method as claimed in Claim 10, further including a 
step of requesting that said transceivers of said second set 
scan for detecting signals transmitted by said particular 
mobile station. 

- , .. 12 - A method as claimed in : Claim 11, wherein said step of 

, _ .requesting includes . providing a - transmission ' to the second 
network, wherein said transmission instructs said second set 
. . - . of . transceivers .. to perform- a - scan 'for detecting signals 
...transmitted .by said -particular base'mobile station. 

13. A method as claimed in Claim 11, wherein said step of 
. receiving . includes determining measurements of wireless 

: s.iqnals^ of-, a , reverse; path 'from said particular mobile station 
to said transceivers of said secbnd set. 

14. A method as claimed in Claim 3, wherein said step of 
determining includes activating at least one location 
estimator . for providing at least -two estimates of a location 
of said particular mobile station, - wherein each 1 ' said at least 
one. location estimator is- supplied with location information 
derived using at least one of said location related data and 
said additional location related data. 

15. A method for locating a wireless mobile station, 
comprising: 

receiving, by a receiving means, first data related to 
wireless signals communicated between a particular mobile 
station and at least a first network of a plurality of 
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commercial mobile service . provider networks, wherein for e*ch 
said network, there are a plurality of base stations for at 
least one of transmitting and receiving wireless signals with 
a corresponding plurality of mobile stations registered with 
the network, and wherein said particular mobile station is 
registered with said, first ..network for subscribing to a 
wireless service; 

first activating a first location estimator for providing 
a first estimate of a location of said particular mobile 
station, -wherein said first location estimator is supplied 
with first location information from said receiving means for 
deriving said_first estimate, said first location information 
including data obtained using the first data, said location 
information capable of changing with a change in a location of 
said particular mobile station; 

wherein when said location estimator supplied with said 
first location information, said first estimate is one of: (a) 
is deemed ambiguous, (b) can not be provided, (c) is not 
within a desired range of accuracy, and '(d) has an extent 
greater than or equal to a predetermined size, then the steps 
(Al) and (A2) are performed: 

(Al) instructing said particular mobile station to 
communicate with a second network of the plurality 
of networks for supplying second data to said 
receiving means, wherein said particular mobile 
station is not registered with said second network 
for subscribing to a wireless service, and wherein 
said second data is [related to] derived using 
wireless signals communicated between the mobile 
station and the second network; 
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(A2) second' activating '>a second location estimator tor 
■ providing a second estimate of a location of said 
. particular mobile station wherein said second 
location estimator -is supplied with additional 
location Information from said receiving means, said 
additional ' location information including data 
obtained using the second -data; 

outputting at least one of the., first and second estimates 
of the location of the mobile station as an estimate of the 
location of the mobile station. . 



16. A method for locating a wireless mobile station as 
claimed in Claim 15, wherein said., additional location 
information and said first location information are utilized 

"together by said location estimator . 

17. A method of locating a .wireless mobile station as 
claimed in Claim 15, wherein said communication stations 
include wireiess base stations for one of CDMA, TDMA, and GSM. 

-.18. ."A" method of locating a ' wireless mobile station as 
claimed in Claim 17, wherein said communication stations 
include home base stations. 

19. A method of locating a wireless mobile station as 
■claimed in Claim- 15, wherein the mobile station includes one 

of: a CDMA- transmitter, a TDMA transmitter, and a GSM 
transmitter, and a AMPS transmitter. 

20. A method for locating a wireless mobile station as 
claimed in Claim 15, wherein one or more of said activating 
steps includes: 

(a) said location estimator for determining whether the 
mobile station is detected by a communication station which 
communicates with the mobile station as a cordless telephone; 
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(b) said location, estimator . for estimating a location of 
the mobile station using location information related to data 
from a distributed antenna system; 

(c) said location estimator for estimating a location of 
the mobile station by -one of: triangulation and trilateration. 

21. A method for locating a wireless mobile station as 
claimed in Claim 15, wherein said predetermined extent is less 
than one thousand feet. 

22. A method for locating a wireless mobile station, 
comprising: 

first receiving first signal characteristic measurements of 
wireless signals communi-cated between a mobile station and a 
first network of base stations, wherein said base stations in 
the first network are : cooperatively linked by a first wireless 
service provider for providing wireless communication; 

[instructing] providing, to ■ a second network of 
cooperatively linked base stations for providing wireless 
services to registered mobile stations [that are cooperatively 
linked by a second wireless service provider for providing 
wireless communication so that the] mobile station location 
data obtained using said first signal characteristic 
measurements, wherein said second network [searches for] uses 
said mobile station location data for detecting wireless 
signals from the mobile station, and wherein said [first and 
second wireless service providers are different] mobile 

station § subscriber of said first wireless service 

provider's network and mobile station is not a subscriber of 
said seco nd wireless service provider's network ; 

second receiving . second signal characteristic 
measurements of wireless signals communicated between the 
mobile station and said second network of base stations; 

estimating a location of the mobile station using said 
first and second signal characteristic measurements. 
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23. A method for •locating a- Wireless mobile station, wherein 
the mobile station- communicates via wireless signals with a 
wireless network' infrastructure having a plurality of spaced 
apart .base stations for wireless communication with said first 
.., mobile station, wherein- said wireless network infrastructure 
identifies said mobile station by a first identifier for 
-.routing substantially all of ' its 'communications to said mobile 
station, comprising: 

providing an in-premise ' transceiver at a predetermined 
premise address for communicating with said mobile station, 
.. wherein said in-premise transceiver "' routes substantially all 
communication with said mobile station" through a 
communications- network- that- identifies said mobile station by 
. a second, identifier - different from' said 'first identifier, 
wherein the ■• communicat ions network"- uses said "second identifier 
... .for -routing .substantially -all' of 'its communications to said 
- mobile station; . ... . " -' ' '" : ' •'''• 

scoring Information; : relating the 'premise address and said 
■second identifier; : 

, transmitting,, by said in-premise transceiver,' a status to 
, the .-.communications network " when there is a change as to 
whether . said mobile: "station " and" said in-premise transceiver 
.- are within a range of one another to wifelessly communicate, 
wherein said status is_indicative of said change ; 
- storing, in a predetermined storage,' said status, wherein a 
first value is stored when said mobile ' station is within range 
for- communicating with said in-premise transceiver, and has a 
second . value - which ..is • stored when' said mobile station 
communicates with, rsaid . in-premise transceiver; 

retrieving, using at least .a portion of said information, 
said status from said predetermined storage; 

determining that the premise address is a' location of said 
mobile station when said first value is retrieved as a value 
for said status. 

24. A method for locating a wireless mobile station, as 
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claimed in Claim 23, wherein said in-premises transceiver is a 
home base station. 



25. A method for locating -a wireless mobile station, as 
claimed in Claim 23, wherein said predetermined storage is 
accessible via one of: autonomous- notification message and a 
request-response message. 

26. A method for locating a wireless mobile station, as 
claimed in Claim 23, wherein said predetermined storage is a 
home location register. 

21. A method for locating a wireless mobile station, as 
claimed in Claim 23, .wherein said predetermined storage 
includes one or . more of the following data items related' to 
said mobile station: mobile station identification number, in- 
premise transceiver identification and mobile switch center 
identification. 

28. A method for locating a wireless mobile station, as 
claimed . in claim 23, . -wherein ■ said step ' of transmitting 
further includes associating said change with a predetermined 
fixed location and said in-premise transceiver identification. 

29. A method for locating a wireless mobile station, as 
claimed in Claim 23, further including a prior step of 
provisioning a translating database from a customer care 
system containing the location of the in-premise transceiver. 

30. A method as claimed in Claim 23, wherein said 
communications network is physically connected by a wire to 
said in-premise transceiver for communicating with said mobile 
station . 

31- A method as claimed in Claim 23, wherein said 
communications network includes a public switched telephone 
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network. • _ ■-. ; . 

32. A method as claimed in Claim 23, wherein said step of 
„ providing includes .providing a correspondence in-premise 

... transceiver and said . mobile station that is used by said 
communications network for routing substantially all 
communications to said mobile station via said in-premise 
transceiver . 

33, A method, as claimed in Claim" 23, wherein said steps of 
storing and retrieving include a : step of notifying a service 
control point component of said communications network. 

■ < . ...3,4. A method . as • claimed in Claim 23, wherein said step of 
. . retrieving includes . accessing a " home location register for 
said mobile, station;.;; • 

35. A method as claimed in Claim- 23, wherein said step of 
retrieving is performed for determining when to route calls to 
said mobUe., station by .said first- identifier and when to route 

. calls •- t ;°. sa A4 mobile ^station by said second identifier. 

36. A method as claimed in Claim 23, wherein said step of 
retrieving is performed for redirecting a communication to 
said mobile station, wherein said redirecting is one of: (a) 
from said in-premise . transceiver to said wireless network 
infrastructure, and (b) from said wireless network 
infrastructure to said . in-premise transceiver. 

37. A method as claimed in Claim 36, wherein said 
redirecting from said in-premise transceiver to said wireless 
network infrastructure is performed when said 'second value is 
retrieved in said step of retrieving. 

38. A method as claimed in Claim 36, wherein said 

redirecting from said wireless network infrastructure to said 
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in-premise transceiver is performed when said first value is 
retrieved in said step of retrieving. 

39. A method for locating a wireless mobile station, 
comprising: ■ 

receiving data from wireless signals communicated between 
a mobile station and a wireless network including a plurality 
of distributed antennas; 

detecting, using said data, that the mobile station is in 
wireless communication with [a] said distributed antenna 
system having a plurality of antennas connected in series and 
distributed along a signal conducting line so that there is a 
predetermined and. purposefully introduced signal time delay 
between said antennas and at predetermined locations; 

determining a plurality of signal time delay measurements 
for signals transmitted between the mobile station and a 
collection of some of said antennas, wherein said signals are 
also communicated through said line; 

estimating a location of the mobile station using said 
plurality of signal time delay measurements. 

40. A method for locating a wireless mobile station as 
claimed in Claim 39, wherein said step of estimating includes 
correlating each measurement of said plurality of signal time 
delay measurements with a unique corresponding one of said 
antennas. 

41. A method for locating a wireless mobile station as 
claimed in Claim 39, wherein said step of estimating includes 
performing a triangulation using values related to one of: a 
signal time of arrival, and a signal time difference of 
arrival for time difference of arrival corresponding to each 
antenna in said collection. 

42. A method for locating a wireless mobile station, as 
claimed in Claim 39 wherein said step of estimating includes a 
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step of computing, a .most, likely location of said moDile 
station using a fu-zzy logic- computation-. 

43. A method- for,, locating a wireless mobile station as 
claimed in Claim 39, wherein said step of activating includes 
.activating . one of: ; 

{a) a location est imator ' f or determining whether the 
mobile station is detected by a base station of 
■the network, wherein said base station 
communicates with the mobile station as a cordless 
telephone; ■ 

. .(b) . a location estimator for. estimating a location 
■:- of t A e : moi ?ile station using location information 
. obtained from said .distributed antenna system; 

(c) a location estimator for estimating a location 
of the mobile station by one of: triangulation and 
trilateration. 



44. A method for locating a wireless mobile station, 
comprising: 

- first receiving first signal characteristic measurements 
of wireless signals communicated between a mobile station and 
a first network of base stations, wherein said base stations 
in the first network are cooperatively linked by a first 
wireless service provider for providing wireless 
■ communication; 

instructing the mobile station to search for a wireless 

signal from' a second network of base stations that are 

cooperatively linked by a second wireless service provider for 

providing wireless communication, wherein said mobile station 

is a subscriber of said first [and second wireless service 

providers are different] wireless service provider, and said 

mobile station is not a subscriber of said second wireless 
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service provider; 

second receiving second signal characteristic 
measurements of wireless signals communicated between the 
mobile station and said second network of base stations; 
estimating a location of the mobile station using said first 
and second signal characteristic measurements. 

45. A method for locating a wireless mobile station as 
claimed in Claim 44, wherein the mobile station is registered 
for a wireless communication service with the first wireless 
service provider, and the mobile station is not registered for 
the wireless communication service with the second wireless 
service provider. 

46. A method for locating a wireless mobile station as 
claimed in Claim 44, wherein said step of instructing includes 
transmitting a command to the mobile station for instructing 
the mobile station to search for a signal from a base station 
of said second wireless service provider in a frequency 
bandwidth different from a frequency bandwidth for 
communicating with the base stations of : said first wireless 
service provider. 

47. An apparatus for locating a first mobile station, 
wherein the first mobile station communicates via wireless 
signals with a first wireless network infrastructure having: 

a plurality of spaced apart base stations for wireles 
communication with said first mobile station, wherein at least 
one of said first mobile station and said first wireless 
network infrastructure has a capability for obtaining a 
plurality of multipath measurements for one of: one or more 
forward transmissions to said first mobile station, and one 
or more reverse transmissions from said first mobile station 
to said first wireless network infrastructure, and wherein 
said multipath measurements are derived from both fixed 
clutter and variable clutter, comprising: [wherein said mobile 
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switching center also communicates 'with said plurality of base 
stations for receiving measurements of said radio signals, 
.•> ■' said measurements including': ' 

'( i ) first measurements of said radio signals received by 
■said first mobile station in said forward radio bandwidth, and 
(ii) second measurements o'f said radio signals transmitted by 
said first mobile station in said reverse radio bandwidth;] 

'a mobile station location determining system for locating 
said first' mobile station, wherein" said location determining 
= 'system is capable of 'transforming' [receives said first and 
second] values- indicative of said' multipath measurements for 
". :at- least one of - said forward transmissions and said reverse 
transmissions, wherein said transformed values have an 
enhanced dependence on multipath measurements derived from 
, ' . - : fixed clutter ' as compared to multipath measurements derived 
.. . from -variable" clutter;-' 
• : • therein said' • mobile station location ^determining system 
• ' includes- at least one wireless location determining model for 
estimating ' "a location of said first mobile station, said at 
. least one model uses one' or more of said transformed values; 

a • means for-' transmitting, to said location determining 
system, said values indicative of said multipath measurements; 

a means for outputting, from said location determining 
system, a resulting location estimate of said first mobile 
station. 

48. .An apparatus for locating a mobile station as claimed 
in Claim :47, further including a means for requesting data 
related to additional radio signals between said first mobile 
station and at: least a -second wireless network infrastructure 
different from said first wireless network infrastructure. 

49 - An apparatus • for locating a mobile station, 

comprising: 

a wireless network infrastructure for communicating with 

a plurality of mobile stations; each said mobile station for 
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transmitting and \ receiving .'.wireless signals, wherein said 
wireless signals are received in a forward bandwidth and said 
wireless signals are transmitted in a different reverse 
bandwidth, and, said wireless ■ network ■ infrastructure having a 
plurality of spaced apart base stations for communicating via 
said wireless signals with said plurality of mobile stations; 

a location determining means for communicating with said 
plurality of mobile stations,, via said^ radio signals with the 
base stations, wherein said location determining means 
communicates with said plurality of base stations for 
receiving CDMA finger measurements related to said radio 
signals for estimating a location of at least a first of said 
plurality of mobile stations, said measurements including: (i) 
first measurements of said wireless signals received by said 
first mobile station in said forward radio bandwidth, and (ii) 
second measurements of said wireless signals transmitted by 
said first mobile station in said reverse radio bandwidth; 

wherein said location determining means estimates a 
location of said first mobile station using both said first 
"measurements and said second measurements. 

50. An apparatus for locating a mobile station as claimed 
in Claim 5, wherein said measurements include at least one of: 
a ratio of energy per bit versus signal to noise, a word error 
rate, a frame error rate, a mobile signaling means, a power 
control value, a pilot index, a finger identification, 
timeoffset, an identification of said first mobile station for 
communicating with the wireless network infrastructure, a make 
of said first mobile station, a revision of said first mobile 
station, a sector identification of one of the base stations 
receiving said radio signals transmitted from said first 
mobile station. 

51. An apparatus for locating a mobile station as claimed 
in Claim 49, wherein said location determining means receives 
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said measurements .from a* distributed antenna system. 

52. An apparatus, f.o.r locating a mobile station as claimed 
in. Claim 4 9, wherein-. ■: said' location- determining means receives 
active, candidate, and remaining . set information from said 
first mobile signaling means. 

53. A method for • Locating a .' wireless mobile station, as 
claimed in Claim 2 ; 2, further including a step of requesting 
the mobile station to raise it's transmitter power level to a 
predetermined level,- prior to said' step of 'second receiving 
second . signal characteristics measurements. - 



54. A method for locating a mobile station, comprising : 
receiving, by said mobile station,, a ...request control 

message from one of a plurality of base . stations , wherein said 
message is received by a receiving antenna of said mobile 
station; 

the control message providing information, related to said 
message to at least one of a control processor and a searcher 
receiver in said mobile station; 

determining, using at least one of said control processor 
and said searcher receiver, a plurality of multipath finger 
sets for a wireless communication between said mobile station 
and at least " a first of the base stations,, .wherein for at 
least some of said multipath finger sets are different; 

transmitting signals for said finger sets to one or more 
' of the base stations via a transmitting antenna of said mobile 
" station; 

routing data for at least one of . said finger sets from 
said one or more base stations to a mobile station location 
estimator for estimating a location of said mobile station. 

55. A method for locating a mobile station, as claimed in 
Claim 54, wherein each of said multipath finger sets includes 
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at least a pilot offset identification value, an energy per 
bit over effective power spectral noise plus interference 
value, and a time offset value. 



56. A method for locating a mobile station, as claimed in 
Claim 54, wherein said step of determining includes a step of 
instructing, by said control processor, said searcher receiver 
to- output a plurality of said radio signal strength related 
values for a plurality of fingers resulting from said 
communication from said first base station to said mobile 
station. 

57. A method for locating a mobile station, as claimed in 
Claim 54, further including a step of establishing a software 
■controllable data connection ■between said control processor 
and a mobile station component including at least one of: a 
user digital baseband component and' said modulator, wherein 

. said connection inputs said data to said component. 

56. A method for locating a mobile station, as claimed in 
claim 54 further said data for- said fingers' to a mobile 
station location estimation system having a first mobile 
station location estimating component using time difference of 
arrival, measurements for locating said mobile station via one 
of trilateration and triangulation. 

59. A method for locating a mobile station, as claimed in 
Claim 56, wherein said step of providing includes selecting 
one of: said first mobile station estimating component, a 
second mobile station estimating component using data obtained 
from a distributed antenna system, and a third mobile station 
estimating component for using data obtained from activation 
of a home base station. 

60. A method for locating a mobile station, as claimed in 
Claim 59, further including a step of computing a most likely 
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location of said. mobile station- using a fuzzy logic 
computation. . , . 

61. A method for locating a mobile station, as claimed in 
Claim 60, ..wherein said step of computing is performed by said 
second, mobile station estimating- component for determining a 
most likely floor that said mobile station resides in a multi- 
story building having a. distributed antenna system. 

62. A .method for obtaining data related to wireless signal 
characteristics, comprising: 

providing a user with a mobile station for use when the 
user traverses a route, having one or :more predetermined route 
locations., wherein one or more of the route ' locations have a 
corresponding, telephone- number and. a -corresponding description 
stored in .the mobile station-;., 

performing the- - following substeps . -when ■ the user visits 
each ., of . the route -- locations :, : activating a call to said 
corresponding telephone number; 

transmitting a code .. identi fying "the route location when 
the . user is^ substantially at the. route location; storing an 
association of: . - ■■■ , • . r -- 

(a) signal characteristic ■ measurements for wireless 
communication between the mobile station and one or more 
base stations, and • 

(b) a unique identifier for the route location obtained 
using said code transmitted by said call; 

Wherein said stored signal characteristic measurements are 
accessible using said unique identifier. 

63. A' method as claimed in Claim 62, further including, 
prior to said step of activating, a step of determining, by 
the user, that a display on the mobile station uniquely 
identifies that said corresponding description of the route 
location is available for calling said corresponding telephone 
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number and transmitting said identifying code. 

64. A method as claimed in Claim 62, wherein said step of 
storing includes using a phone number identifying the mobile 
station in combination with said transmitted identifying code 
for determining said unique identifier. 

65. A method as claimed in Claim 62, wherein said 
corresponding description includes at least one of: a textual 
description of its corresponding route location, and an 
address of its corresponding ' route location. 

66. A method as claimed in Claim 62, further including a 
step of filtering said signal characteristic measurements so 
that when said signal- characteristic measurements are 
suspected of being transmitted from a location substantially 
different from the route location, said step of storing is one 
of: (a) not performed, and (b) performed so as to indicate 
that said signal characteristic measurements are suspect. 

67. A method as claimed in Claim 66, wherein said step of 
filtering includes at -least one of: (a) determining an amount 
by which an estimated location of the mobile station using 
said signal characteristic measurements differs from a 
location of the mobile station obtained from said unique 
identifier; (b) determining whether a predetermined amount of 
time has elapsed between successive performances of said step 
of activating. 

68. A method for locating a wireless mobile station, 

comprising: 

first receiving first signal characteristic measurements of 
wireless signals communicated between a mobile station and a 
first network of base stations, wherein said first signal 
characteristic measurements includes: 
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.(a) one or more multipara finger data sets for a 
wireless communication between the mobile station 
and at least a first of the base stations; 

(b) data identifying, operational .characteristics of 
the mobile station including information related 
to a signal transmission power for the mobile 
station and information for determining a maximum 
transmission power level of the mobile station; 

. . adjusting, for at least one of said data sets, using said 
data, data, set has . the corresponding adjusted value wherein 
said adjusted value is an expected value of a predetermined 
standardized .mobile station transmitter power level having a 
predetermined, maximum : transmission power and ' operating at a 
predetermine<d transmission power level; 

outputting . second ..-signal • - characteristic ' information, 
obtained ...using said : ; ad justed : .signal strength, to a mobile 
station location estimator far determining a location estimate 
of said firs.t. mobile station. ;. 

. 69 -; . : A : m ^t hc ^. : for .locating ; a^ mobile- station as claimed in 
Claim 68, further, including applying a sequence of one or more 
signal processing filters to one of: said data sets and said 
adjusted data., sets. 

70. A method . for locating - ■ a wireless mobile station, 
comprising : 

first receiving first signal characteristic measurements 
of wireless signals communicated between a mobile station and 
a first network of base stations, wherein said first signal 
characteristic measurements includes one or more multipath 
finger_measurement sets for a wireless communication between- 
the mobile station and at least a first of the base stations; 
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categorizing said sets into categories according to ranges 
of related values for obtaining a representation of a 
frequency of occurrence of said one or more pairs in said 
categories; 

applying one or more filters to said categorizing sets for 
one of: (a) reducing characteristics of said representation 
that are expected to be insufficiently repeatable for use in 
identifying a location of the mobile station, and (b) 
enhancing a signal to noise ratio; 

supplying an output obtained from said step of applying to 
a mobile station location estimator; 

estimating a. location of . the mobile station using said 
mobile station location estimator. : 



71. An apparatus for locating a mobile, station as claimed 
in Claim 47, further including a means for providing a 
location estimate using, the Internet. 

72. An apparatus for locating a mobile ■ station as claimed 
in Claim 47, further including a means for providing a 
location estimate using digital certificate keys and the 
Internet . 

73. apparatus for locating a mobile station as claimed in 
Claim 72, further including a means for providing a location 
estimate using push technology on the Internet. 

74. An apparatus as claimed in Claim 73, wherein said means 
for outputting includes an Internet web site for transmitting 
said resulting estimate location from said location 
determining system to a predetermined Internet address. 

75. An apparatus as claimed in Claim 74, further including 
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encryption/decryption 'modules- ■ for providing secure Internet 
communications between " said ' Internet web site and said 
predetermined -Internet address. 



76. An apparatus as claimed in Claim 75, wherein said 
predetermined Internet address corresponds to an Internet 
receiving client at an emergency assistance service center, 
' 4 wherein an identification of said first mobile station is 

provided to said emergency assistance service center 
substantially concurrently with the location of said first 
mobile station being transmitted to said location determining 
system. ... 

77 . . An • -apparatus as claimed in Claim 76, wherein said 

receiving client ' is ■ used ; at an emergency response center. 

78. A method for locating a first mobile station, wherein 
"the-* first'-*' "-mobile station communicates via wireless signals 
with ^ : first -'wireless network infrastructure having a 
plurality of ^spaced ' apart base stations for wireless 
communication with said first mobile station, wherein at least 
one of- said first ""mobile station " and said first wireless 
network' infrastructure ■ has a capability for obtaining a 
plurality of - multipath measurements for one of: one or more 
forward transmissions to said first mobile station, and one or 
more reverse transmissions from said first mobile station to 
said first wireless network infrastructure, and wherein said 
multipath measurements are derived from both fixed clutter and 
variable cluster, comprising:* 

transmitting, from said first wireless network 
infrastructure to a location determining system, values 
indicative of said multipath measurements; 

transforming said values indicative of said multipath 
measurements for at least one of said forward transmissions 
and said reverse transmissions, wherein said transformed 
values have an enhanced dependence on multipath measurements 
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derived from fixed clutter as compared to multipath 
measurements derived from variable cluster; 

determining at least one wireless location estimate of 
said first mobile station using one or more of said 
transformed values; 

outputting said location estimate of said first mobile 
station. 

79. A method as claimed in Claim 78, wherein said first 
mobile station and said first wireless network infrastructure 
communicate using CDMA. 
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